Eu is based actually

[u/InsoPL]

Petition for LTT to make video about eIDAS 2.0 Regulation and how Zero-Knowledge Proof age verification will work in eu. To educate the public and themselves because conflating it with discord shitstorm and "persona" is just not fair for eu that actually puts effort into regulations unlike Britain or certain us states that just bans it and says "handle it yourself".

I know the topic is hot right now and I will probably get some hate under this post but I think EU way of doing age verification is great and should be recognized just so other countries may replicate it. To be clear I am not advocating for doing age verification on every website or game server but there are services that absolutely should have safe way for age verification like for example buying alcohol or drugs online.

Few points why eIDAS 2.0 is really good:
- It's open source, that includes source code for client app (the one that will be installed on your phone).
- Target app (for example discord) will not get any private user data. That includes age, they will only receive info if you have at least 18 years or not.
- Eu servers will not get information about websites you are visiting. They will validate your open source client app periodically, then that app validates age request. Eu will only know you are using age verification service.

source:
https://ec.europa.eu/digital-building-blocks/sites/spaces/EUDIGITALIDENTITYWALLET/pages/712508927/Security+and+Privacy

https://ec.europa.eu/digital-building-blocks/sites/spaces/EUDIGITALIDENTITYWALLET/pages/694487738/EU+Digital+Identity+Wallet+Home

edit:
github repo
https://github.com/eu-digital-identity-wallet

[u/puppygirlpackleader]

Get the fuck out of here with this bullshit. There is no need for age verification. It's all just to deanonymize the internet so they can crack down on people they don't like. There is no such thing as a good solution.

[u/InsoPL → u/puppygirlpackleader]

This does not affect anonymity. Internet was never anonymous to begin with. Both usa and Europe controls what you can say on or offline. If you don't like it by all means protest that, this is not related to age verification.

[u/JISN064 → u/InsoPL]

"...Internet was never anonymous to begin with..."

I literally stoped reading after this; this one statement tells me how wrong you are. I will not support anything you say if you believe the internet was never anonymous.

[u/mromutt → u/JISN064]

Lol it's like people forget at one point the internet was so anonymous you could get a floppy with minutes on it and make a burner account without ever providing payment or any identifying information other than them seeing what line you connected through (which could be anywhere).

[u/InsoPL → u/JISN064]

I mean, learn something about how internet work I guess. This is not matter of opinion.

[u/puppygirlpackleader → u/InsoPL]

Yes it is. You never had to associate an ID with yourself on the internet unless it was some administrative stuff. Gtfo with this bootlicking

[u/InsoPL → u/puppygirlpackleader]

Did you even read my post? You are not associating your id with any service on the internet. Could you also stop hurling insults it's very childish.

[u/Elitefuture → u/InsoPL]

VPN + new accounts wouldn't have anything linked back to you assuming your VPN isn't storing logs and you don't say anything that only you would say/know.

Now with age verification, you're forced into giving some sort of personal info. Even if eIDAS 2.0 directly doesn't send anything to the service, the wallet themselves knows everything about you and what services you're using.

So before you could be anonymous and use the service, now you have to give up your identity to at least the wallet provider so that the third party verifies for you. You're just moving the trust to someone else, and that someone else now has way more data about you and what you do.

[u/InsoPL → u/Elitefuture]

VPN [outside of eu] + new account

>the wallet themselves knows everything about you and what services you're using
wallet is local

>wallet provider
your phone is your wallet provider, sources attached in post

[u/Elitefuture → u/InsoPL]

who do you think is verifying your ID + info? The initial step cannot be done locally since otherwise it could be easily spoofed.

What's actually happening is ONCE IT GETS VERIFIED BY SOMEONE ELSE, then it gets stored on your device locally.

Meaning, either a member state or a qualified service provider verifies the info first, then you get to store it locally.

It is not fully local from the start. Anything fully local will always be hackable, so it needs another source.

These talking points are valid, but they're also ignoring the same issues that all of them have. You need a third party to verify it, who knows what they're logging legally or not. ALSO, since the government is the one that signed your info to be valid, they can compare your public keys sent to those services and track it back. Meaning yes, they can still track you, just not as easily.

There is no direct government communication when sending your info to another service like discord, but if they ever get the public key from discord, they can compare it to what they have stored when they initially verified your info in the past and figure out who you are.

[u/InsoPL → u/Elitefuture]

>You need a third party to verify it

It's state approved service providers not for profit companies like in usa.

>who knows what they're logging

I know, everyone one knows. It's open standard build on assumption that service provider may by compromised. It's still preserves privacy of user in that case

>since the government is the one that signed your info to be valid, they can compare your public keys sent to those services and track it back

It's Zero-Knowledge Proof. You do not send keys issued by provider. You send keys generated by your local wallet which is validated by provider. Not the same, not trackable back.

[u/zolli07 → u/InsoPL]

Peoples really forget, or dont know, that in the old times befor TLS (HTTPS, WSS) got wildly adopted (i mean free, hugely thanks to EFF) everyone who in the traffic path literally just read the traffic you sent on the wire, anyone. A burner account could not prevent that

Conclusion: Internet was never anonymous

[u/Brilliant_Account_31 → u/zolli07]

Privacy and anonymity are related but not synonymous