Hacker News new | ask | show | jobs
by samename 123 days ago
EFF has a good write-up about zero-knowledge: https://www.eff.org/deeplinks/2025/07/zero-knowledge-proofs-...

> What ZKPs don’t do is mitigate verifier abuse or limit their requests, such as over-asking for information they don’t need or limiting the number of times they request your age over time. They don’t prevent websites or applications from collecting other kinds of observable personally identifiable information like your IP address or other device information while interacting with them.
2 comments
notTooFarGone 123 days ago
The arguments they make is a good example of "Don't let perfect be the enemy of good".

If we allow incumbents to make photo age verification and upload of ID to third-parties to be the solution, we will have a much worse solution.

link
worldsayshi 123 days ago
Exactly. And I do think that a world where zkp ids are taken for granted is one where the issues they point to will be more surmountable than today.
link
worldsayshi 123 days ago
Interesting. While that is true I don't see how it's an argument against. Over-asking + ZKP certainly seems superior to over-asking + without ZKP. Without ZKP in a world where you constantly need to identify yourself you have absolutely no privacy.

And going forward I think that any communication without establishing some kind of trust boundary will just be noise.

link