enforce maximum number of keys per uploads

[google]

enforce maximum number of keys per uploads

[gurayAlsac]

Interesting. Would that preclude those with newly installed apps to legitimately confirm positive? We could change the client api to supply fake keys if the full 14 aren't available.

[mikehelmick]

The maximum maximum number, in the pathological case is 14*144
New key generated, each interval, over the last 14 days.

It is totally treasonable for a single key to be submitted and still be valid.

When we add verification pin codes, that will require that a health authority has diagnosed the user.

[mikehelmick]

/cc @flagxor

[laurentsimon]

I think from the proposal, there is one random key generated each day, and for each interval the key is derived from the day-key as PRF(key_day_n, interval). So there are 14 keys to upload, correct?

Keys not available because the app installation is too recent should be replaced by fakes ones. Nobody should able able to tell these are fakes, not even the server.

Does this make sense?

[mikehelmick]

fixed as part of #157

This is an env var, defaulted to 14 - it's possible that a locale may want to configure this to report longer (or shorter) history.