@punissuer @jonsnow It comes with a lot of issues too, like sites/apps could leak birth dates by repeatedly probing until a boundary is found and the reference implementation requires passing of strong integrity in Google Play Integrity, which shuts out alternative operating systems.

But fight the real thing (especially being bound to Google/Apple, it's nice that the EU tries to do it in a privacy-preservint way) and not some caricature.

@punissuer @jonsnow that's not how the EU age attestation proposal and reference implementation work though. They use privacy-preserving attestation using zero-knowledge proofs (which has issues too).

So, age proofs would be tied to authentication in e.g. a national ID app (such as DigiD in the Netherlands), which would basically return a true/false to sites for an age check.

It won't work with silly photo scans like some other countries.

https://digital-strategy.ec.europa.eu/en/faqs/eu-age-verification-solution

@jonsnow I hate these attacks on privacy as most people here, but the title does a lot of editorializing for clicks.

First, the linked paper doesn't say what the EU wants, but states that 'some people say'. Second, they don't want to forbid VPNs I general, they seem to want to require age attestation for VPNs as well to close the loophole of visiting a site from a country without age verification.

I think in fighting these things, it's good to be precise and not sling clickbait.