The problem is how do you hide what website you’re going to from the identity provider?
Not only don’t you need to, you would really have to know the generator of the token because it needs to verify that you are the user that was issued the token.
You upload identity to a site and it gives you a date stamped token which confirms your age.
Then when that token is uploaded to an SM site, it verfies the identity of the giver with the site that gives the token. The identity is a hash generated by the token site and contained in both the token and a namespace at the token site, so only the token site knows the real identity. Once the token has been confirmed, the namespace is re-used.
So you can’t really sell the token, because its linked back to the identity you uploaded to the token site. You need to be logged in to the token site.
Identification would need to be handled by a 3rd party to even remotely work. Then they pass on the “yes they’re over 16” tick to the social media platform, with no actual identity details.
The legislatiion specifically allows SM sites to handle ID.
I don’t see many options between asking for a birthdate and asking for ID for this problem. I don’t see any way that this can be enforced that isn’t problematic.
The senate inquiry outlined the two likely solutions :
Uploading ID to the website.
3D face scanning. This will include continual monitoring so if another person comes into view they will have to face scan in. Remember, its prohibited for chidren to even watch prohibited content with their parents.
The law does not require users to upload government IDs as part of the verification process.
No, it merely requires the sites to provide an alternative, such as face scanning using a mobile phone unlock. Using a computer ? Then you’ll have hand over your ID.
The law also explicitly gives sites the right to onsell private information if its outlined in the terms of agrrement.
Hey fuck this shit