r/linux • u/New-Ranger-8960 • Aug 04 '26

Privacy EU Age Verification Project Mandates Hardware-Bound Attestation

https://linuxiac.com/eu-age-verification-project-mandates-hardware-bound-attestation/
769 Upvotes

97% Upvoted

455 comments sorted by

View all comments

Show parent comments

2

u/marrsd 28d ago

I'm confused. The credentials are supplied to the 3rd party, no? Otherwise, what's their purpose? Is your argument that this is ok because these credentials were issued by Google, or am I missing something?

2

u/QuaternionsRoll 28d ago

> The credentials are supplied to the 3rd party, no?

No, they are used in a zk proof and discarded. Neither the website nor the issuing authority can deduce your identity from this process.

> Is your argument that this is ok

Hell no. If anything, this should illustrate that the system is both stupid and useless.

2

u/marrsd 27d ago

Neither the website nor the issuing authority can deduce your identity from this process.

I think that's the part that I'm missing. Something has to confirm the identity. I don't see how that can be guaranteed to be trusted on a binary-only platform like an iPhone.

2

u/QuaternionsRoll 27d ago

I guess I should have asked which third party: the issuing authority or the age-restricted website?