• 29 Posts
  • 1.31K Comments
Joined 2 年前
cake
Cake day: 2024年1月12日

help-circle















  • I doubt this doesn’t actually leave a paper trail.

    At some point, you send that nonce to an age-verifier service. So they can keep track of it, and if the 18+ website you visited at some point later wants to know your identity, they can ask the age-verifier service who asked for that nonce to be signed.

    This involves that two organizations are corrupt, however: both the 18+ website and the age-verifying service. Law could mandate that they both cooperate, however, thus creating a single point of (privacy) failure.

    I still believe it is doable, however. Check my other comment involving a piece of paper that is drawn from a box. My method relies on the fact that the age-verifying service doesn’t actually know which code they gave you, just that they gave you one. For digital services, seevices can always keep track of their input/output, which is not always possible in real life.


  • It is doable, i think. Consider:

    You go to your local library. They verify you’re above the age limit (like they do at supermarkets when you try to buy alcohol: either look you in the face and recognize you’re clearly old enough, or have to show them some kind of id, details vary.)

    You pick a code (put your hand in a box and draw a piece of paper at random). Nobody knows what code you picked except you. If lots of people do this at the same time, it’s impossible to accurately map codes to people’s identity.

    You scan the code (like QR code) with your social media app that you use, and it associates the code with your account. Now everybody knows you have a valid code associated to your account, but nobody knows your identity.

    (The code could work something like a cryptographic signature, where you can show that you have a valid code without actually revealing the code, so others can’t simply copy it. That’s a technical detail that you need to leave to the programmers to accurately understand.)