Okay, obviously Persona is terribad. There is a real problem to address here though: how are organizations supposed to perform reasonable identity verification at a distance? Sophisticated impersonation attacks hit customer support lines every day. We need a reasonable defense against this.

I'm asking because I honestly can't imagine a solution to this particular problem that is both:

  • User friendly
  • Acceptable to privacy advocates

@mttaggart Depending on the required security/confidence level … Every tobacco store, every liquor store, every tobacco vending machine in the EU does age verification and then hands out an "anonymous" object. So if we consider "adult sites"/"social media" to be exactly as dangerous as smoking, these machines/stores could just sell "proof of age tokens".

Which could also serve as anonymous micropayments, while we are at it.