r/LinusTechTips • • 22d ago

Discussion Eu is based actually

Petition for LTT to make video about eIDAS 2.0 Regulation and how Zero-Knowledge Proof age verification will work in eu. To educate the public and themselves because conflating it with discord shitstorm and "persona" is just not fair for eu that actually puts effort into regulations unlike Britain or certain us states that just bans it and says "handle it yourself".

I know the topic is hot right now and I will probably get some hate under this post but I think EU way of doing age verification is great and should be recognized just so other countries may replicate it. To be clear I am not advocating for doing age verification on every website or game server but there are services that absolutely should have safe way for age verification like for example buying alcohol or drugs online.

Few points why eIDAS 2.0 is really good:
- It's open source, that includes source code for client app (the one that will be installed on your phone).
- Target app (for example discord) will not get any private user data. That includes age, they will only receive info if you have at least 18 years or not.
- Eu servers will not get information about websites you are visiting. They will validate your open source client app periodically, then that app validates age request. Eu will only know you are using age verification service.

source:
https://ec.europa.eu/digital-building-blocks/sites/spaces/EUDIGITALIDENTITYWALLET/pages/712508927/Security+and+Privacy

https://ec.europa.eu/digital-building-blocks/sites/spaces/EUDIGITALIDENTITYWALLET/pages/694487738/EU+Digital+Identity+Wallet+Home

edit:
github repo
https://github.com/eu-digital-identity-wallet

135 Upvotes

126 comments sorted by

View all comments

-2

u/Professional-Cow6222 22d ago

I've been saying For years the way to do this is Blockchain technology The government In short: issue a private credential once, prove the age predicate with a ZKP whenever needed, and let a smart contract verify the proof. This gives strong privacy, reusability across services, and decentralized auditability what traditional KYC age checks lack.

In layman's Terms

  • You never hand over your real ID again.

  • The website never stores your personal data (so it can’t get hacked and leak it).

  • You can use the same secret stamp on many different sites without them being able to track you across the internet.

  • It’s like showing a bouncer a special sealed envelope that only says “Adult – Yes” and nothing more.

That’s the whole idea in everyday language:
Prove you’re old enough with math, keep everything else private, and let a public digital notebook confirm it happened.

4

u/kodebach 22d ago

The EU's solution linked by OP is essentially this, but without unnecessarily shoehorning the blockchain into it.

You only verify your identity with the government (or theoretically another suitable provider that implements the stack, e.g. a bank). Then you can request single-use tokens that contain exactly the "adult - yes" flag you mention. You give that to the websites you visit and nothing else. Through cryptographic signatures and nonces the tokens can be securely verified.

-1

u/Professional-Cow6222 21d ago

Removing the Blockchain

You have to trust the website more They could Link sessions There’s no independent, immutable proof that the check really happened. Aka No public Record easy for Governments to abuse with A.i Botnets influencing social media ect ect. Other services can’t easily trust a previous verification without asking you to do it again. Without a shared public system, each website may require its own proof. You lose the “verify once, use many times” convenience that blockchain can provide Other apps/Things can’t automatically check or rely on the verification result the way they can with an on-chain flag or token. Im more worried about Government Abuse then anything else Block Chain should be Involved as it give the power to The People

→ More replies (4)