logoalt Hacker News

barbazooyesterday at 11:31 PM1 replyview on HN

Why not, seems to be made exactly for this purpose if you look at the "‘Age over 18’: true" flag. What's bad about that solution?

> The technical solution for an EU age verification app is privacy-preserving, open source and user-friendly.

> First, the user downloads the app onto their phone and sets it up by certifying their age. This can be done with a biometric passport/ID card, a national eID (e.g. national ID Card or other electronic identification mean), a pre-installed third-party app (e.g. a banking app), or in person (e.g. at the post office). Only the information confirming that the user is over the age will be saved in the app. No name, no birthday, or any other data is saved.

> After completing this step, the communication between the app and the provider certifying the user’s age (e.g. eID, third-party app) ends. No further data is exchanged.

> The app is then ready to be used online. When an online platform asks to verify the user’s age, the user can use the app to communicate they are over a certain age (e.g. ‘Age over 18’: true) to the platform.

https://digital-strategy.ec.europa.eu/en/faqs/eu-age-verific...


Replies

EmbarrassedHelptoday at 1:41 AM

The EU app still requires that you let them violate your privacy in exchange for a batch of about 30 easily trackable tokens that expire after 3 months. It also bans rooting/jailbreaking, bans third party operating systems like GrapheneOS, and requires that you install Google Play Services/IOS equivalent for "anti-tampering".