EU chief calls for a bloc-wide push on an age verification app to protect children online. If enforced, users will have to prove their age to access legally restricted sites.
But let’s separate the technical/privacy discussion of age gating from the discussion about age gating social media platforms.
If I go to a Scottish distillery website and buys chocolate, they are not going to age gate me. If I buy whisky they will. That’s not age gating at the door, that’s age gating for a specific product that we, our democratic society, have decided, through democratic means, should not be available to minors.
Regulating social media age gating is a different discussion altogether. The discussion is about whether we want to be able to anonymously check (again, the EU standard requires anonymity) someone’s age online.
Stop moving the goal posts. Also, no one has convincingly shown they can do that anonymously, but lots have shown they CAN’T. You can’t divorce the privacy implications because they are intrinsically linked right now and there is no evidence supporting the ability to unlink them.
The architecture for Zero Knowledge Proofs is not novel and well understood.
You prove your identity to the issuer of tokens. They issue you a set of signed tokens that only they could have signed. You issue one of these tokens and a nullifier to a location that needs to verify your age. The verifying location checks the signature and lets you in. They return the nullifier to the token issuer.
The issuer can OF COURSE verify that you’ve used your tokens if they store the tokens they issue. You do have to trust your government for this system to work. But you already trust your government not to mass-surveil you through your ISP, mobile phone provider and credit card spend. This doesn’t increase your defend surface.
But let’s separate the technical/privacy discussion of age gating from the discussion about age gating social media platforms.
If I go to a Scottish distillery website and buys chocolate, they are not going to age gate me. If I buy whisky they will. That’s not age gating at the door, that’s age gating for a specific product that we, our democratic society, have decided, through democratic means, should not be available to minors.
Regulating social media age gating is a different discussion altogether. The discussion is about whether we want to be able to anonymously check (again, the EU standard requires anonymity) someone’s age online.
Stop moving the goal posts. Also, no one has convincingly shown they can do that anonymously, but lots have shown they CAN’T. You can’t divorce the privacy implications because they are intrinsically linked right now and there is no evidence supporting the ability to unlink them.
Which goal posts have I moved?
The architecture for Zero Knowledge Proofs is not novel and well understood.
You prove your identity to the issuer of tokens. They issue you a set of signed tokens that only they could have signed. You issue one of these tokens and a nullifier to a location that needs to verify your age. The verifying location checks the signature and lets you in. They return the nullifier to the token issuer.
The issuer can OF COURSE verify that you’ve used your tokens if they store the tokens they issue. You do have to trust your government for this system to work. But you already trust your government not to mass-surveil you through your ISP, mobile phone provider and credit card spend. This doesn’t increase your defend surface.