"However, this system is vulnerable to a very simple threat: a dishonest seller can make a copy of a real bottle with a token, fill it with wine of lower quality, and either steal you..." The argument around “someone that doesn’t care about tokens” is weak because that applies to any authenticity solution. The idea behind the authenticity guarantees would be that every step along the way, you add a record that the ob…
There is still the chance that someone along the way consumes the real wine or sells it (at a loss?) to someone who doesn't care about authentication, and then sells on a fake bottle with the real certificate - but:
- at least in that case there would be a well-defined chain of owners that should make it much simpler to figure out who's doing the counterfeiting.
- you can only do this once for each real bottle that you purchase, since you can't forge the certificates.