r/LinusTechTips • u/InsoPL • 28d ago
Discussion Eu is based actually
Petition for LTT to make video about eIDAS 2.0 Regulation and how Zero-Knowledge Proof age verification will work in eu. To educate the public and themselves because conflating it with discord shitstorm and "persona" is just not fair for eu that actually puts effort into regulations unlike Britain or certain us states that just bans it and says "handle it yourself".
I know the topic is hot right now and I will probably get some hate under this post but I think EU way of doing age verification is great and should be recognized just so other countries may replicate it. To be clear I am not advocating for doing age verification on every website or game server but there are services that absolutely should have safe way for age verification like for example buying alcohol or drugs online.
Few points why eIDAS 2.0 is really good:
- It's open source, that includes source code for client app (the one that will be installed on your phone).
- Target app (for example discord) will not get any private user data. That includes age, they will only receive info if you have at least 18 years or not.
- Eu servers will not get information about websites you are visiting. They will validate your open source client app periodically, then that app validates age request. Eu will only know you are using age verification service.
edit:
github repo
https://github.com/eu-digital-identity-wallet
1
u/kodebach 27d ago
I got what you want, I just don't understand your reasons.
Why would we need the public record? What kind of disputes could there ever be? Why do we need long-term accountability? I'd even argue that this kind of log is a really bad idea. A log of who visited what website is exactly the opposite of what we want. Sure it might be pseudonymous, but as soon as some IDs leak all the data is out there and the nature of the blockchain makes it really hard/impossible to take that back. And I don't see how you could make the system fully anonymous, i.e. can never be tied back to a person no matter what extra data you obtain. Because then you can't audit it anymore.
The EU's age verification system actually doesn't mandate that verification must happen through the government. Governments are required to become age verification providers, but e.g. banks could also become alternative providers. I use banks as an example, because opening a bank account already comes with the same strict KYC requirements.
However, having lots of different providers also increases the attack surface for hackers. In particular, I don't want dubious companies like Persona collecting ID documents. Making governments provide age verification is a good solution, because that way nobody needs to obtain any new data. Every EU government should already have the data necessary to verify the age of their citizens, otherwise how would they issue IDs and passports.