• 0 Posts
  • 31 Comments
Joined 3 years ago
cake
Cake day: August 27th, 2023

help-circle




  • Not sure that’s necessarily true. I don’t see why it couldn’t work like this:

    1. request personal token from authority. it works similar to a certificate chain, your token is derived from a central certificate
    2. you store your token locally
    3. you visit an age-restricted website. you send your token (or a challenge encrypted with that token) back to the website
    4. the website verifies your token with the certificate from the authority, (like how literal Certificate Authorities work) . the CA doesn’t know when or why your token was used.

    (fwiw I am sure governments will try their best to make this process less private)