2 ms·
It is possible to do an age verification system with the following properties: 1. The site that wants to verify your age learns that your age meets their crite
by tzs 3y ago
It is possible to do an age verification system with the following properties:
1. The site that wants to verify your age learns that your age meets their criteria but does not learn anything else from the verification system except as noted in #2.
2. The site that you present ID information to in order to prove your age does not learn what site the verification is for. The site in #1 will learn what site you presented ID to but not when you presented it.
3. Someone who obtains all the records from both sites is not able to tell whether or not you visited the site in #1.
It seems inevitable that age verification is going to become a requirements at many sites. Instead of just trying to stop that from happening those who want to maintain the ability to browse anonymously should probably also put some effort into trying to insure that if/when it does happen sites are required to accept a system with those three properties.
- raxxorraxor 3y ago4. A third party knows which service you frequent and can also deny the service 5. With device tracking and fingerprinting and leaked data, establishing your real ID should ironically be childs play. You only look at the cryptographically relevant data of resource and auth provider, but there is contemporary data that makes including a third party a security issue. Otherwise #3 is wrong in any practical case. Age verification is already implemented for some services. I don't use them anymore. There are better alternatives.