Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The digital identity wallet isn't part of the DSA; it is part of an effort to bring identity to your phone, basically: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A...

If implemented according to plan, things like ID cards, drivers' licenses, diplomas, train tickets, and even payment control can be handled within such apps entirely digitally. Aside from age verification, with attribute based authentication you can prove digitally that you're permitted to drive a certain vehicle without revealing your social security number (equivalent).

A healthy dose of cynicism would make clear that the moment such optional infrastructure is rolled out, new legislation can be drafted to "save on expenses" by enforcing this digital model and "protect the kids/fight the terrorists" by forcing age verification on more businesses.



> Aside from age verification, with attribute based authentication you can prove digitally that you're permitted to drive a certain vehicle without revealing your social security number (equivalent).

That doesn't make sense because the government knows about every vehicle and its owner and his social security number and there is no point to hide it. I think you misunderstood something or I misunderstood your comment.

The goal of "bringing identity to your phone" is making identification easier to require it in more cases so that the government knows better what its citizens do. One thing if you are required to fill a 20 fields form to buy a bicycle and another thing if you need just to tap your phone at the cash register.


Yes, but this isn't part of the digital wallet project. As I understand it, the Commision was so impatient with age-verification that they commissioned this project separately, because they didn't want to wait for the full solution, hence it being called a "mini-ID wallet".

I'm certainly not against vigilance and making sure no new laws mandating the use of either this or the full digital wallet sneak through, but my point is that, despite the Commision's misleading public stance, age verification is (mostly) not mandatory today.


That's true, but as this is only a small part of the larger project, it's also targeting a very specific part of legislation.

The README for the age verification spec specifically calls out article 28 of the DSA and the Louvain-la-Neuve Declaration. Neither is aiming to be the mandated age verification mechanism for every single website, but rather a specific tool to solve a specific problem: age limits on social media and big tech websites.

If, or, seeing Denmark's recent bullshit: when, we do get mandatory age requirements, it'll be part of new legislation that will likely take years to go into effect, and, seeing how long it took websites to comply with the GDPR, will start affecting most websites even later. This isn't the doomsday law that I would've expected to come from the US if they were to write something like this, and using privacy-first cryptography does give me some faint hope that this isn't just a big performance to hide malicious intent. This could've been as bad as eIDAS 2.0 with the QACs and other unreasonable technical requirements.


> can be handled within such apps entirely digitally.

_Can_ be handled? So you could still just use traditional physical, paper IDs?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: