4 ms·
Why does the government need to know what pages you visit? It could just encode a string representing the date and 'above 18' and sign it with its private key.
by Epa095 4mo ago
Why does the government need to know what pages you visit? It could just encode a string representing the date and 'above 18' and sign it with its private key. PH then just needs to verify it using the public key.
- gambiting 4mo agoEven better solution then. >>Why does the government need to know what pages you visit? In the UK the government already knows, but that's beside the point. It's another bad law that should have been fought against much more than it was.
- gambiting 4mo agoActually, thinking about it some more - it has one major downside. You can't have a single use key this way.
- Epa095 4mo agoWell the idea with the date/timestamp was that it would only be valid for X minutes, but if you are afraid that in the 10 minutes window it can be used multiple places you can add some salt to the process. PH pops up a page showing "Your secret word is: hamburgers. Provide access code below:". Age-verifier webpage asks for the secret word, and will create a json with "secret: hamburgers, claims: over_a18, date:2026..." and sign it with its private key, and this will be the code (encoded as a number). PH will verify that the code contains the secret "hamburgers", the claim and that its fresh enough (although this step is maybe not needed since it had the valid one-time secret).
- gambiting 4mo agoRight, yeah I like that idea. I think that would actually work correctly and safely. Disregard my other comment on this :-)