4 ms·
I totally agree with the author's main point: if we must do "age verification," we should do it through third party identity providers and not directly give our
by CobrastanJorji 1y ago
I totally agree with the author's main point: if we must do "age verification," we should do it through third party identity providers and not directly give our information to everyone.
I have a semantic question, though. If I get tokens from an identity provider which I then pass to an adult website, is that really a "zero knowledge" proof? It's been a while, but I don't think that's a zero knowledge proof. Or maybe it is? I'm not sure what the formal definition is.
- Tadpole9181 1y agoYes, it's zero knowledge as long as you don't consider knowledge of which provider you use to be knowledge. Which, if used at scale, shouldn't be. The token isn't one that you receive and use as-is, so there's no way for the token's generator to tie it to your identity. And when redeemed, the generator can only confirm the token is valid, not that you made it (and therefore what service you're using). Kagi has some articles on the technical details for their "Privacy Pass" feature. However, using a VPN and pre-generating tokens is still recommended to prevent side-channel attacks based on timing.