We all know that the EU wants age verification for the web. I dont trust my country, the EU and definitely not Instagram, Twitter etc. to implement this in way where my personal data won’t be shared with anyone. But the idea that everyone on social media is a verified human beeing could also have a lot of positive effects.
Imo it would be awesome if every person could have only one single account. Bans and restrictions have much more impact which forces users to behave more like irl. You could reduce a massive amount of bots which would reduce fake news and be a time saver for mods.
As a solution for the privacy issue, I searched for open source passport verification tools and found ZKPassport which makes the proof on you own device without sending you data anywhere. It generates a deterministic Id which is salted and hashed, so you can’t find a real person from a user account or otherwise. Only this Id is sent to the server as a proof, nothing else. The code is open source and its possible to self host the backend for this system.
I try to implement ZKPassport into a lemmy fork to make a small proof of concept for this idea. Of course this needs a lot more security features for a real production scenario, because mods and server owners have much more power and the federation is more complicated with only a few servers that have passport auth enabled and some even have their own implementation of the auth.
So if the proof of concept works out well the question is, would people be rather use passport authenticated Fediverse instances when all of you data stays on your phone?
EDIT: I don’t suggest that the whole fediverse switches to passport authentication, every instance can decide on their own. Therefore you could also have multiple accounts across multiple instances but not multiple accounts on the same instance.
Like I already wrote, its not possible to identify a real person based on the user data on the platform, even if you gain access to the database and server. No passport data is sent to the server only the id which can’t be reversed to get you’re personal data. So you can still be anonymous
Despite that: I don’t want to keep all of the internet behind a passport verification wall. This would be terrible. I imagine it more like we have some platforms or servers where people need to verify
Wtf is even the point of this then? Who is checking the IDs? If you can’t link it to a person why he’ll do they want your id?
The point is to verfiy someone does not already have an account and is not a bot. Your smartphone is checking the ID locally. Governments provide public lists of keys that match keys on the passports of their citizens, so you can download the public lists locally and check them on your device outside of any social media platform etc. Your smartphone just sends something like “this user is verified” to the server
I applaud your critical thinking, but you are asking inside a bubble that knows answers before it asks questions. I doubt such an idea can at this time in history be implemented in a grassroots way.
Thank you, I guess you are right. Still, there were some good points here and there that were worth learning. I’m going to give it a try anyway (on my local machinet) and see how it goes…
Nope, still 100% NO!!! I don’t care what the scheme is. I don’t trust any of the people or companies involved. I don’t trust the company that makes my cell phone, the operating system, the gov, none of it.
There is literally nothing you could say to me that would ever have me scanning my ID to access social media. I already hate this shit, Lemmy is barely acceptable. Lemmy goes ID medication and I just delete my account and the app, period. I’d be completely done.
Ok got it, thanks for your input!
No, no and no. I’m using lemmy on a desktop computer because typing on a phone is a PITA. Requiring a phone, or any other physical second factor authentication, is additionally antithetical to the “let’s use less resources” point of the fediverse.
No, no and no. We already don’t trust corporations, why would we trust governments? Who among here is free of sin to cast the first stone? The US? (And woe betide having to authenticate with your own government that is already repressing you)
No no and no. No need for smartphone.
What the hell is all this crap? Who are you really working for? Make your disclosures.
You only need the phone for the inital registration, but yes I get your point.
Governments already have the data. In a certain way you already trusted them by getting your passport and the platform just checks if its correct. The important part is to verify without sending the data into the internet.
I am not working for anyone why wood I? Everything is for free and open source, I don’t even have a lemmy instance so I can’t even publish it. I will just share my code and people can do with it whatever they want.
Bold way of saying I “trust”. I never chose to be born in a given country, they have not obtained an informed, actionable consent on my end for that association, nor have I agreeded to have my activities bound by specifically their imagined permits regarding where this or that land ends. And once again: this does not solve for those who have their own State as one of their primary aggressors.
What the fuck is your agenda?
What do you mean? I am just coding an open source project in my spare time to learn, maybe improve the web with it and ask people about their opinions. If you don’t like that you don’t need to use it, probably no one will in end.