Comment on Is it completely impossible to do age verification without compromising privacy?
ComradePenguin@lemmy.ml 2 days ago
Yes. There are many solutions.
Maybe the absolutely easiest to implement is just a signed message from an authority (gov.). You click a button on the website that requires verification, get a new tab to a gov. site with no identifiers from the site redirecting you and get a message you copy. The copied message is then pasted in to the site requiring verification. The site can then verify the message at their servers.
That still creates a chain that can be followed. If the site you’re trying to enter is ever compromised, there will be record of your government code and whatever tracking is used to verify that you have entered your code.
I would be happy if the government was not involved in my online activities at all but I guess that ship is about to sail.
See also: timing attacks
This requires you to trust gov that they will not trace where the secret message is pasted.
How about
Middleman anonimizer, pornhub sends the message to a middleman, the middleman puts its own token on the request, sends that to the gov, the gov responds yes/no to the middleman on the authenticity of the message, the middleman forwards the response to pornhub. The gov doesn’t see pornhub, pornhub only gets the yes/no response, the middleman only sees the message with no ID and the response.
If they can trace it, why would they need the code to do it? They know who you are already
Scirocco@lemmy.world 2 days ago
Hey benign and honorable govt!
Please tell the website “kill-your-govt .net” that I am old enough to join the revolution!!!
Kthxbai