Hacker News new | ask | show | jobs
by nemomarx 330 days ago
Do they have that implementation? When I looked into it I thought you had to send your passport scan to a vendor of some kind?
1 comments

Yes. That “send your passport in” type of id verification is complete BS and everyone knows that. That’s why there is so much work going into modern cryptographic digital identity standards. You should be able to say “I have it on good authority that I’m over 18” and the other party simply computes the hash of that statement and checks that it matches one of the hashed claims in your digital credential.

https://www.ietf.org/archive/id/draft-ietf-oauth-selective-d...

https://csrc.nist.gov/csrc/media/presentations/2024/wpec2024...

No I get that people are working on it, I mean does the UK have an implementation of it for the online safety act that just went into effect?

The only things I've seen are friends having to submit a photo of their ID to discord to keep using it, etc. The GP was talking about the British version of this specifically right

The NIST link talks about the EU version of this. IDK specifically if the British govt has their head up their ass or not and I’m sorry if they do. The EU and industry standards all support selective disclosure today (there are at least mature standards drafts) and people are working on incorporating ZPKs. The thing Discord does is how you have to solve this problem if you don’t have digital ID. And unfortunately it will exist for quite a time to fill the gaps until digital ID fully proliferates.
simple answer no. OFCOM the regulator responsible for ensuring compliance has a nice guide on how you can prove you should be allow to see such filth: """ And how will I prove my age?

There’s a number of methods a site or app might use to ask you to confirm your age. They might do this check themselves or use another company to do the check. These methods include:

- Facial age estimation – you show your face via photo or video, and technology analyses it to estimate your age.

- Open banking – you give permission for the age-check service to securely access information from your bank about whether you are over 18. The age-check service then confirms this with the site or app.

- Digital identity services – these include digital identity wallets, which can securely store and share information which proves your age in a digital format.

- Credit card age checks – you provide your credit card details and a payment processor checks if the card is valid. As you must be over 18 to obtain a credit card this shows you are over 18.

- Email-based age estimation – you provide your email address, and technology analyses other online services where it has been used – such as banking or utility providers - to estimate your age.

- Mobile network operator age checks – you give your permission for an age-check service to confirm whether or not your mobile phone number has age filters applied to it. If there are no restrictions, this confirms you are over 18.

- Photo-ID matching – this is similar to a check when you show a document. For example, you upload an image of a document that shows your face and age, and an image of yourself at the same time – these are compared to confirm if the document is yours. """

https://www.ofcom.org.uk/online-safety/protecting-children/a...