Post #2413865

@rnd@toot.cat This very much here. The moment you compare the Online AV to the "meatspace" AV, the ZKP approach turns out to be useless while being technically correct. Yes, ZKP preserves privacy of the age check but the problem is it doesn't mirror the real-life process. Because when one shows their ID, the other party does BOTH age check AND ID check at the same time. The critical part is the data retention because nobody is indeed taking a copy of the ID or writing down the details UNLESS they have an explicit permission to do so (I think even banks aren't doing this these days anymore). The analogy with the real-life equivalent of the token is in fact a neat example of why ZKP is not the solution in the end. Case in point, health insurance cards have a little note on them (at least in my home country) saying "This card is valid only when presented together with a valid identification document." In the end, online AV with ID check is a massive privacy violation; online AV without an ID check is effectively useless (ZKP pretty much becomes a glorified "I'm over 18" checkmark).