this post was submitted on 29 Aug 2025
816 points (99.9% liked)

Technology

74736 readers
2596 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] Zwuzelmaus@feddit.org 6 points 4 days ago (7 children)

Age check happens by trusted entity (your government, not some sketchy big tech ass), they create a signed cert with a short lifespan to prevent your kid using the one you created yesterday and without the knowledge which service it is for.

Sorry, not sufficient.

Not secure.

" I certify that somebody is >18, but I don't say who - just somebody "

This is an open invitation to fraud. You are going to create at least a black market for these certificates, since they are anonymous but valid.

And I'm sure some real fraudsters have even stronger ideas than I have.

[–] homoludens@feddit.org 1 points 4 days ago (3 children)

Making the certs short-lived (a few minutes) and single use and having a rate limit for users could make it difficult enough with serious risks (if you make it a crime) for little profit (I doubt many kids will pay serious amounts of money to watch porn; definetly not drug-scale amounts of money).

[–] Zwuzelmaus@feddit.org 1 points 4 days ago (2 children)

You cannot make a certificate "single use" (except if it exists only inside a closed system).

[–] homoludens@feddit.org 0 points 4 days ago

I was using the wording of OP who seems to be talking about tokens. The service asks the trusted entity if the token is valid, the trusted entity deletes the token after the first time.

load more comments (1 replies)
load more comments (1 replies)
load more comments (4 replies)