So the problem I see with that solution is twofold: * If there is a central authority collecting the information, then as far as Jeff the User knows, his infor

So the problem I see with that solution is twofold: * If there is a central authority collecting the information, then as far as Jeff the User knows, his information could be stored in plain text on a subpoenable hard disk by the central authority. * If the information is verified by a set of moderators, then the moderators must be numerous enough that no single moderator could capture a substantial portion of the identity data. But to achieve that, the mod requirements would be low enough that an attacker could infiltrate their ranks and uncover the identities of users.