[ranger_danger]

> In layperson’s terms, ZKP makes it possible for people to prove that something about them is true without exchanging any other data. So, for example, a person visiting a website can verifiably prove he or she is over 18, without sharing anything else at all.

But how does it prove that the request is actually made by a person and not a bot? Surely that part is technically impossible right now?

[MatteoFrigo]

The government gives a signed document to natural persons, and the ZK system proves that the document is signed by the government. Bots don't have passports or driver's licenses.

How does the government guarantee that the natural person is such? Various jurisdictions will decide what's good enough, but as a strawman proposal, you go in person to city hall once and upload a document to your phone.

[ranger_danger]

That might prove the token itself is legit, but still doesn't prevent a bot from using it, right?