> But then the government knows your location at any point of time and how often you use websites requiring the age check.

Not as described. There's no location info in that path, and the signed statement of that UUID passing the age check does not need to be re-signed because I've not given any consideration to expiry.

(Should I consider expiry? It's not like people age backwards?)

> Also, if your device is configured to do it automatically, a child can also follow this verification.

Yes, if that device has been associated with a government ID and also the government ID signing process fails to make use the things we've already got on-device like how my phone reads my fingerprint to know I'm me and can store copies of some forms of government ID (in some places but not where I live, Apple Wallet apparently only supports some US states, Japan, Greece, and UAE).

▲

baby_souffle 8 hours ago | parent [-]

> Not as described. There's no location info in that path

Ip address and general time of day will tell you a lot about location. Not street level, but country or state level.

> UUID passing the age check does not need to be re-signed because I've not given any consideration to expiry.

So as soon as any one uuid is leaked, it becomes plausible for any child to bypass the gates until the uuid is manually revoked?

	▲	ben_w 8 hours ago \| parent [-]
		> So as soon as any one uuid is leaked, it becomes plausible for any child to bypass the gates until the uuid is manually revoked? How? Phones are already locked down pretty hard. Anything like this would need to be in something secured at the OS level just to stop signatures getting leaked between apps. If you're thinking "kid roots device, replaces OS entirely", that's not the problem of the manufacturer of the OS that just got deleted.