Somewhere in a government building in the UK: We did it, Patrick…

  • pika@feddit.nl
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    1
    ·
    8 hours ago

    Is the system opaque? Does someone else hold the private encryption keys? Could unencrypted data leak from the company and expose users?

    If any of those answers are “yes”, then assume it’s already compromised by a government and unsafe.

    • Ulrich@feddit.org
      link
      fedilink
      English
      arrow-up
      2
      ·
      7 hours ago

      There is no encryption involved. They just give you a token that verifies your age and you present the token to the site.

      • pika@feddit.nl
        link
        fedilink
        English
        arrow-up
        2
        ·
        7 hours ago

        But you have to submit evidence of age to some site, right? So where does that evidence (your ID) get sent to or stored? Once it’s sent, are you sure it’s not stored? Is the token unique or traceable to you?

        I honestly don’t know, and when I don’t know, I have to assume it’s not staying private.