this post was submitted on 25 Feb 2026
538 points (99.1% liked)
Technology
81911 readers
4364 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments

Because then you can share the token and everyone can use it
I'm sure a more robust solution is possible though.
The scheme from the Danish government, shared in another comment, avoids the sharing by allowing token to be used only once, and, because the government issues the tokens, it can block people from getting tokens if they detect abuse. This can be done by rate-limiting, geoblocking and all sorts of techniques.
Remember that the function of the anonymous token is to not allow the service provider (like an OS, or a a website) to see your identity. This still allows the government to see which service provider you are using.
Hopefully the service provider can form pools yo block the government from knowing each individual website, but that's not a given.
You can make them biometric and still be private, but that's even more effort which they wont spend.
Personal ids can also be used by non-owners, not much different than this theoretic age verification token. But yeah, ideally it would have a security layer to sufficiently confirm ownership.
Ah tbh I just realised that with the tokens being unique you could still limit accounts per token to 1, achieving the same effect as using real ID.