EU ID and Age Verification is so strange project

Written by

in

Why this specification of age verification is so mobile-centric? Like, there are no options like these:

  • OTP via SM flow,
  • FIDO2 webauthn flows with TPM, Yubikey and other USB dongles with keystores and data signing capabilities
  • dedicated device with monochrome display, specialized EUID/Age Verification software preinstalled, and USB, NFC and Bluetooth interfaces, without any touch of Google or Apple

The whole spec rotates only about just 2 flows:

  1. mobile device of quite specifc kind, with stock Android or iOS onboard, with age verification app installed.
  2. device from (1) used to scan via camera a QR code appearing on screen of the other device.

I asked a related question to this spec here: https://github.com/eu-digital-identity-wallet/av-doc-technical-specification/discussions/62

If find this relevant, and have GitHub account – boost that question please.

(PS: already seen question there from people asking why ever GitHub used to store that spec)

Fediverse Reactions

Comments

Likes

Reposts

Leave a Reply

Your email address will not be published. Required fields are marked *

To respond on your own website, enter the URL of your response which should contain a link to this post’s permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post’s URL again. (Find out more about Webmentions.)