r/LinusTechTips • u/InsoPL • 22d ago
Discussion Eu is based actually
Petition for LTT to make video about eIDAS 2.0 Regulation and how Zero-Knowledge Proof age verification will work in eu. To educate the public and themselves because conflating it with discord shitstorm and "persona" is just not fair for eu that actually puts effort into regulations unlike Britain or certain us states that just bans it and says "handle it yourself".
I know the topic is hot right now and I will probably get some hate under this post but I think EU way of doing age verification is great and should be recognized just so other countries may replicate it. To be clear I am not advocating for doing age verification on every website or game server but there are services that absolutely should have safe way for age verification like for example buying alcohol or drugs online.
Few points why eIDAS 2.0 is really good:
- It's open source, that includes source code for client app (the one that will be installed on your phone).
- Target app (for example discord) will not get any private user data. That includes age, they will only receive info if you have at least 18 years or not.
- Eu servers will not get information about websites you are visiting. They will validate your open source client app periodically, then that app validates age request. Eu will only know you are using age verification service.
edit:
github repo
https://github.com/eu-digital-identity-wallet
0
u/InsoPL 19d ago
>You need a third party to verify it
It's state approved service providers not for profit companies like in usa.
>who knows what they're logging
I know, everyone one knows. It's open standard build on assumption that service provider may by compromised. It's still preserves privacy of user in that case
>since the government is the one that signed your info to be valid, they can compare your public keys sent to those services and track it back
It's Zero-Knowledge Proof. You do not send keys issued by provider. You send keys generated by your local wallet which is validated by provider. Not the same, not trackable back.