Hector Martin

As long as they’re working hard to find out which ones are affected and replacing them now, I’m fine with no communication until done.

So you're fine with them leaving all their users vulnerable to complete and utter impersonation until they manage to deploy a fix? The vulnerabiilty is public *today*, hackers don't wait until you're done with logistics.

I’m not fine with doing nothing. It’s just that communication probably won’t change much. How are these NFC features used?

The NFC features are tangential; what matters is that signatures made with these ID cards (I/O method doesn't matter) have *complete legal equivalence* to written signatures, and this is used by many companies and government institutions.

Literally, we're in a window where anyone in Spain who owns one of these cards and has ever used it (certificates with a factorable modulus exist) can have their electronic identity completely and utterly stolen.

I’m just asking which part you can avoid by communication to everyone. If there is something where it helps, then yes, do it.

The point of communicating to everyone is *informing* that the system is broken and that it should not be trusted. The bad guys already know. The good guys need to know. It means things like not accepting e-signed docs without further checks.

If there are systems accepting bad keys, they should be informed by now. For users accepting docs, agreed, there it would help.