4 ms·

How is this not solved yet? A government API. It gives claims. Such as user x is an adult. User logs in first, authorises an app to get a specific claim a sp

How is this not solved yet? A government API. It gives claims. Such as user x is an adult. User logs in first, authorises an app to get a specific claim a specific period or amount of times, User logs in to the app, app calls the API. There is no need for IDs or credit cards or any of the sort. The EU has already solved this years ago?

pjc50 2y ago
Did they? Why have I not heard of the EU solution?
- randunel 2y ago
  It hasn't been launched, yet, but the public tender details are here https://ec.europa.eu/info/funding-tenders/opportunities/portal/screen/opportunities/tender-details/ae950883-112f-4139-989e-1c8d794bb77a-CN https://ec.europa.eu/info/funding-tenders/opportunities/port... I don't know if the commenter refers to this one or not, it's probably too recent and far from "solved". The EU portal itself has an identity verification functionality, I can use my national ID (national insurance number, specifically) in EU polls, petitions and other EU portal functions, but that's anything but anonymous by design.
arkh 2y ago
The main problem is that you may not want the state to know how many porn sites you're accessing. That's where you'd want an intermediary: you log in on porn site A => redirects to some intermediary which only needs to check your age => login from the state, get age, send user with verified token to porn site. Porn site only knows your login and the fact you are an adult. Intermediary knows someone needed to validate their age. State knows this random no porn site wanted to check some claims about you.
- gabeio 2y ago
  Wouldn’t this be a perfect place for something like Privacy Pass? Tokens which the government provides to users to auth them as adults but which are not trackable. https://privacypass.github.io/ https://privacypass.github.io/
- goda90 2y ago
  Anonymous credentials. The state doesn't even need to know when you use your creds because the token can't be linked back to you at all.
braiamp 2y ago
> How is this not solved yet? Because what is the problem to solve here? If you do not require services to confirm the age of the user, they will not have to confirm the age of the user. This is a problem created.
pnutjam 2y ago
Login.gov could provide this in the US, but it's only allowed for federal sites.

pjc50 2y ago

Did they? Why have I not heard of the EU solution?

randunel 2y ago
It hasn't been launched, yet, but the public tender details are here https://ec.europa.eu/info/funding-tenders/opportunities/portal/screen/opportunities/tender-details/ae950883-112f-4139-989e-1c8d794bb77a-CN https://ec.europa.eu/info/funding-tenders/opportunities/port... I don't know if the commenter refers to this one or not, it's probably too recent and far from "solved". The EU portal itself has an identity verification functionality, I can use my national ID (national insurance number, specifically) in EU polls, petitions and other EU portal functions, but that's anything but anonymous by design.

arkh 2y ago

The main problem is that you may not want the state to know how many porn sites you're accessing. That's where you'd want an intermediary: you log in on porn site A => redirects to some intermediary which only needs to check your age => login from the state, get age, send user with verified token to porn site. Porn site only knows your login and the fact you are an adult. Intermediary knows someone needed to validate their age. State knows this random no porn site wanted to check some claims about you.

gabeio 2y ago
Wouldn’t this be a perfect place for something like Privacy Pass? Tokens which the government provides to users to auth them as adults but which are not trackable. https://privacypass.github.io/ https://privacypass.github.io/
goda90 2y ago
Anonymous credentials. The state doesn't even need to know when you use your creds because the token can't be linked back to you at all.

braiamp 2y ago

> How is this not solved yet? Because what is the problem to solve here? If you do not require services to confirm the age of the user, they will not have to confirm the age of the user. This is a problem created.

pnutjam 2y ago