Remix.run Logo
Cthulhu_ 8 hours ago

> And the only way to prove that you checked is to keep the data indefinitely.

This is a false premise already; the company can check the age (or have a third party like iDIN [0] do it), then set a marker "this person is 18+" and "we verified it using this method at this date". That should be enough.

[0] https://www.idin.nl/en/

Attrecomet 7 hours ago | parent | next [-]

Doesn't matter, I've already had to provably identify myself, the information is a) out there b) will be used and stored, and c) will be abused

and there is nothing I or the few (in terms of power) well-meaning government and corporate actors can do to change that.

reorder9695 6 hours ago | parent | prev | next [-]

And how do they prove to me they (and no 3rd party providers) aren't actually storing the data? I simply don't trust companies telling me they won't store something, so to me the only acceptable option is the data to never leave my device.

ivan_gammel 4 hours ago | parent [-]

If third party does verification with ZKP, you only need to trust that third party. The company that requires verification will not have any data to store.

enraged_camel 7 hours ago | parent | prev [-]

Nope, as the article notes, it is actually almost never enough because it does not stand up to legal scrutiny. And for good reason: there's no way to conclusively prove that the platform actually verified the user's age, as opposed to simply saying they did, before letting them in.