Somewhere in a government building in the UK: We did it, Patrick…

    • pika@feddit.nl
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      1
      ·
      5 hours ago

      Is the system opaque? Does someone else hold the private encryption keys? Could unencrypted data leak from the company and expose users?

      If any of those answers are “yes”, then assume it’s already compromised by a government and unsafe.

      • Ulrich@feddit.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        4 hours ago

        There is no encryption involved. They just give you a token that verifies your age and you present the token to the site.

        • pika@feddit.nl
          link
          fedilink
          English
          arrow-up
          2
          ·
          4 hours ago

          But you have to submit evidence of age to some site, right? So where does that evidence (your ID) get sent to or stored? Once it’s sent, are you sure it’s not stored? Is the token unique or traceable to you?

          I honestly don’t know, and when I don’t know, I have to assume it’s not staying private.