[takinola]

Here’s an idea for how it could work while preserving your privacy.

1. User verifies their age with a trusted party (which may or may not be a government body)

2. User requests a token from the trusted party. The token is signed so 3rd parties can verify it. The token also includes the public key of the user so 3rd parties can verify whom it is for

3. The user shares this token with the 3rd party site, who is now able to verify the user’s age. Note, the 3rd party site never has to contact the issuer of the token other than to get their public key.

With this model, the token issuer is not able to connect the user to the 3rd party site directly.

We can, of course, think about possible attacks but this is just a basic illustration of the possibilities.