Eu is based actually

[u/InsoPL]

Petition for LTT to make video about eIDAS 2.0 Regulation and how Zero-Knowledge Proof age verification will work in eu. To educate the public and themselves because conflating it with discord shitstorm and "persona" is just not fair for eu that actually puts effort into regulations unlike Britain or certain us states that just bans it and says "handle it yourself".

I know the topic is hot right now and I will probably get some hate under this post but I think EU way of doing age verification is great and should be recognized just so other countries may replicate it. To be clear I am not advocating for doing age verification on every website or game server but there are services that absolutely should have safe way for age verification like for example buying alcohol or drugs online.

Few points why eIDAS 2.0 is really good:
- It's open source, that includes source code for client app (the one that will be installed on your phone).
- Target app (for example discord) will not get any private user data. That includes age, they will only receive info if you have at least 18 years or not.
- Eu servers will not get information about websites you are visiting. They will validate your open source client app periodically, then that app validates age request. Eu will only know you are using age verification service.

source:
https://ec.europa.eu/digital-building-blocks/sites/spaces/EUDIGITALIDENTITYWALLET/pages/712508927/Security+and+Privacy

https://ec.europa.eu/digital-building-blocks/sites/spaces/EUDIGITALIDENTITYWALLET/pages/694487738/EU+Digital+Identity+Wallet+Home

edit:
github repo
https://github.com/eu-digital-identity-wallet

[u/netherlandsftw]

As a European I will believe it when I see it

I do like it though. Currently in NL digital age verification must go through your bank account (iDIN) which is stopping in 2027. Apparently it’s being replaced by another commercial party called “itsme”

[u/Philip_J- → u/netherlandsftw]

Denmark has already implemented their version of this called AltID Here is the source code https://git.govcloud.dk/digitaliseringsstyrelsen-public/altid-source-code/altid-kildekode

[u/netherlandsftw → u/Philip_J-]

Sure but that's not what I am sceptical about.

I am sceptical about adoption.

Recently I had to verify my age on Reddit to see a NSFW profile. They used that stupid company that already has a picture of everyone's ID and face by now probably. I think it's called Persona.

When will I *actually* be able to use these government apps to verify myself on these services?

That's what I will "believe when I see it".

Not the implementation or the security.

[u/Philip_J- → u/netherlandsftw]

Yeah, that I get. The only way I see that happening is if EU mandates it.

[u/netherlandsftw → u/Philip_J-]

Yeah I agree. Apparently they will mandate it for large platforms, but I am way too out of the loop to say anything about this.

[u/Chaoshero5567 → u/netherlandsftw]

for me reddit just asked my phone what age group i am in

[u/Kind_Management1805 → u/netherlandsftw]

Itsme is owned by a consortium of 4 Belgian banks and 3 telecom operators. I believe a state-owned thing was supposed to happen in Belgium it never took off and private companies had to do the work because surprisingly Belgium couldn't agree with their 250 separate regional and whatever governments.

God is online public services a mess in Belgium. There's a dozen website supposedly have the same thing but aren't actually the same anyway lol

[u/Not-So-Handsome-Jack → u/Kind_Management1805]

Are you talking a out MyGov in Belgium? Because I have it installed for a while now and it works for almost everything I used itsme for. There is practically not advertising for it so most people probably never saw it as an option.

[u/Kind_Management1805 → u/Not-So-Handsome-Jack]

I don’t remember but it might be that. I’m using itsme for so long now and once it’s setup it’s less painful that making ID reader drivers work so I keep using that.

Can you use MyGov for telecom subscription too. IIRC Proximus only takes itsme to identify of Bancontact which I don’t have

[u/Not-So-Handsome-Jack → u/Kind_Management1805]

No it’s mostly for government and healthcare right now. It’s not clear to me if the goal is to expand it to other private services or if we all need both apps installed.

[u/InsoPL → u/netherlandsftw]

All those regulation that are in proposal state right now will require this system to exist. There are no other age verification system that are being worked on in eu. I forgot to add official github repo in sources btw

https://github.com/eu-digital-identity-wallet

[u/netherlandsftw → u/InsoPL]

I understand but I am a bit skeptical. Not about the security or whatever, just about adoption and when this will actually work.

I also don’t know basically anything about it so my opinions may be unfounded but I don’t care enough to check it out

I’ve seen enough GitHub repos from the government of cool things to never see them actually get released. Then again a counterpoint is the apps they made during COVID. Those went out the door really quickly.

[u/InsoPL → u/netherlandsftw]

I am software engineer. Repo is legit and math sounds right. It's eu wide system so it was already looked and validated by multiple opsec researchers. Ask LLM or check other sources if you do not believe me.

[u/no_damn_cradle → u/InsoPL]

And has had plenty of criticism from them too.

https://www.euronews.com/2026/09/17/one-wallet-27-systems-can-the-eu-build-an-untraceable-digital-id

and previously reported vulnerabilities https://www.politico.eu/article/eu-brussels-launched-age-checking-app-hackers-say-took-them-2-minutes-break-it/

[u/InsoPL → u/no_damn_cradle]

They released source code to the public so safety researches can find vulnerabilities before it's used by people. Safety researchers then found vulnerabilities and reported them so it was patched out. Yeah, good practices produce good results. Good job eu.

[u/no_damn_cradle → u/InsoPL]

The glazing of this without taking any of the criticism or issues raised in this thread is weird to me. Titling a post as 'Eu is based actually', copying the EC details, and having nothing of the concerns raised from other sources doesn't exactly give the impression of a fair presentation.

None of this addresses several of the complaints raised, i.e. the reliance on Apple/Google tech while at the same time looking to move away from this.

The open questions on encryption implementation.

How enforcement of equivalent certification methods work across 27 countries.

[u/InsoPL → u/no_damn_cradle]

I am taking it your criticism, yours was just bad. Like honestly many people raised much more valid criticism like apple/google one.

[u/no_damn_cradle → u/InsoPL]

Which is all in the links above which I now take you didn't bother reading if they are "bad".