We stopped selling alcohol and cigarettes unless you dox yourself to shady gas stations and stores.
Both of which famously keep databases of everyone’s IDs, and require transmitting your ID over who-knows-what network to who-knows-where.
Oh, wait, no they don’t.
Again, if done correctly, it can be done privately and securely. I am not advocating that we give our ID to every sketchy internet site. I am advocating for a widespread secure and standardized solution.
Right, and such a solution will ultimately just require everyone to trust the fact that it’s been “done privately and securely”
Bazoogle@lemmy.world 5 days ago
Scanning ID’s into a database is a thing. It’s not everywhere, but I have seen places do it. Usually Hospital’s and Casinos
No, that is not true. It is possible to set it up with zero trust, so we do not have to trust them. It will be setup properly in the first place. It’s like the fact that Bitwarden can be open source and yet people can’t just decrypt vaults despite everyone having access to the code. Zero-knowledge proofs can be done without requiring us to trust anyone. That is what I have been saying, but it keeps seeming to be skipped over. There would be an initial proof with a government identification (which basically everyone already has) and from there the system could be setup in a way that you can prove you are over the age without them knowing literally anything about you. It is possible to prove you are over 18 without them even know your age (other than it is greater than or equal to 18)
jaennaet@sopuli.xyz 3 days ago
I wasn’t ignoring your had-wavy “ZK proofs will solve this”; I’m saying that you still have to trust the fact that whatever magical ZK system you have has been implemented correctly and doesn’t leak any information at any point (either on purpose or accidentally).
Unless you’re one of the ~hundreds of people who actually understand the mathematics behind ZK proofs, you won’t be able to do that, and you’ll just have to trust whoever’s in charge of the system when they say “trust me it works” – especially if it’s not 100% open source. Even if it was open source, you’d still have to trust the fact that what was deployed is actually what was published.