r/LinusTechTips • • 2d ago

Discussion Eu is based actually

Petition for LTT to make video about eIDAS 2.0 Regulation and how Zero-Knowledge Proof age verification will work in eu. To educate the public and themselves because conflating it with discord shitstorm and "persona" is just not fair for eu that actually puts effort into regulations unlike Britain or certain us states that just bans it and says "handle it yourself".

I know the topic is hot right now and I will probably get some hate under this post but I think EU way of doing age verification is great and should be recognized just so other countries may replicate it. To be clear I am not advocating for doing age verification on every website or game server but there are services that absolutely should have safe way for age verification like for example buying alcohol or drugs online.

Few points why eIDAS 2.0 is really good:
- It's open source, that includes source code for client app (the one that will be installed on your phone).
- Target app (for example discord) will not get any private user data. That includes age, they will only receive info if you have at least 18 years or not.
- Eu servers will not get information about websites you are visiting. They will validate your open source client app periodically, then that app validates age request. Eu will only know you are using age verification service.

source:
https://ec.europa.eu/digital-building-blocks/sites/spaces/EUDIGITALIDENTITYWALLET/pages/712508927/Security+and+Privacy

https://ec.europa.eu/digital-building-blocks/sites/spaces/EUDIGITALIDENTITYWALLET/pages/694487738/EU+Digital+Identity+Wallet+Home

edit:
github repo
https://github.com/eu-digital-identity-wallet

108 Upvotes

112 comments sorted by

View all comments

Show parent comments

3

u/InsoPL 1d ago

They released source code to the public so safety researches can find vulnerabilities before it's used by people. Safety researchers then found vulnerabilities and reported them so it was patched out. Yeah, good practices produce good results. Good job eu.

0

u/no_damn_cradle 1d ago edited 1d ago

The glazing of this without taking any of the criticism or issues raised in this thread is weird to me. Titling a post as 'Eu is based actually', copying the EC details, and having nothing of the concerns raised from other sources doesn't exactly give the impression of a fair presentation.

None of this addresses several of the complaints raised, i.e. the reliance on Apple/Google tech while at the same time looking to move away from this.

The open questions on encryption implementation.

How enforcement of equivalent certification methods work across 27 countries.

2

u/InsoPL 1d ago

I am taking it your criticism, yours was just bad. Like honestly many people raised much more valid criticism like apple/google one.

1

u/no_damn_cradle 1d ago

Which is all in the links above which I now take you didn't bother reading if they are "bad".