4 ms·
No it really can’t. Age verification requires identification. Even if you could anonymously verify age to issue a “confirmed adult” credential, the whole chain
by dpark 6mo ago
No it really can’t. Age verification requires identification.
Even if you could anonymously verify age to issue a “confirmed adult” credential, the whole chain of trust breaks down if one bad actor shares their anonymous credential and suddenly everyone is verifiably an adult.
The solution to that attack is naturally to have some kind of system for sites to report obviously-shared credentials. Which means tracking.
- goda90 6mo agoThere's already authorities that know your age, so verifying age with them to get the credential isn't the part that needs to be anonymous. The issue is them knowing what you do with your credential, which anonymous credentials solves by making it impossible to track tokens back to the credential holder. As far as sharing, there are some possible mitigations.
- dpark 6mo agoRight. And the possible sharing mitigations generally amount to tracking. This isn’t even getting to the issue that mandating government-issued credentials is the “foot in the door”. If you mandate the use of government creds for accessing websites, it’s an obvious step to turn around and demand that sites report credential use to “fight credential fraud”.
- armchairhacker 6mo agoBut likewise, someone can share (or have stolen) their ID https://news.ycombinator.com/item?id=47951372 https://news.ycombinator.com/item?id=47951372