What was not implemented

Push Notifications

Some national backends could provide this functionality (e.q. for revocation of public keys), but as there are no standards published yet, we decided not to add push notifications.

Code Obfuscation

This was implemented r feature to be implemented (with Proguard for Android, or iOS alternatives).

SSL / Cert Pinning

Until the time of writing this documentation we did not figure out production API URLs, and therefore could not extract certificate hashes from URL.

Security, Pentests

We had no resources for running security tests.

Other Business Requirements

Another business requirements, e.g. like storing Greenpass certificates into Apple Wallet, were not implemented, as lot of similar functionality was rejected in official repositories.

Expo Support

My relationship with Expo is not good yet, so I decided to build the app without Expo.