Comment by nemomarx
2 days ago
there's some irony that the EU is set to have a fairly anonymous solution like next year. they could have waited or tried to use similar tech for this, in theory
2 days ago
there's some irony that the EU is set to have a fairly anonymous solution like next year. they could have waited or tried to use similar tech for this, in theory
Important to note: Their anonymous solution is reported to be temporary until their digital ID system is released[1], which does not offer that same anonymity, but rather functions as a server-side OpenID-based authentication system.[2] While you can share only your age with an online service, it still creates an authorization token, which appears to remain persistent until manually removed by the user in the eID app. This would give the host of that authentication system (EU and/or governments) the ability to see which services you have shared data with, as well as a token linked to your account/session at that service. There is also no guarantee that removing an authorization will actually delete all that data in a non-recoverable way from the authentication system's servers.
[1] https://itdaily.com/news/security/eu-temporary-app-age-verif...
[2] https://openid.net/specs/openid-4-verifiable-presentations-1...
Good catch, that does seem a lot worse. :/
This is about the Category 1 duties arriving by 2027, not this year's tranche of rules (such as age gating).
Interesting - do you have a link to it?
https://commission.europa.eu/strategy-and-policy/priorities-...
It's anonymous to the sites or companies you use it with and not to the government, but that would still be more robust than the uks checks so far. it's only end of 26 though, I thought it was at the end of this year instead.
And that really shows the difference in how the EU operates Vs the UK.
They see a general need which the market cannot easily satisfy on its own - it needs standardisation to be cheap and interoperable, and it needs an identity backed by a trusted authority. So they establish a framework and legislation to make that possible.
The UK instead just states it's illegal not to do it, but without any private and not-trivially bypassed services available.
Proactive vs reactive.
It is often said that legislation tends to lag behind technology. At last, the UK is beating the world by legislating ahead of it!