you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 8 months ago (1 child)

Thanks for the read, I learned something today! I worry, though, that even if someone could devise a ZPK for age verification, can end-users actually trust that platforms are using it? Say for example Meta provides a biometric-based ZPK for age. Can we trust that they're not harvesting our biometric data? In the podcast's examples, it's easy for Peggy and Victor to understand that they are using a ZPK system. However, the age verification problem most often arises in arrangements where the prover is using a client app into whose inner workings they have no insight (either because it's closed source, they're not technologically literate enough, or who has the time to scrutinize the source code for every program they use) and which is most likely developed by the verifier. So the problem kind of moves upstream: how can you trust that ZPK is actually being used?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 8 months ago

    That's why zero trust itself is so important. The only way it can be guaranteed is to have an open standard that is zero trust, so nobody is able to abuse it and the lay person doesn't have to trust anyone. Not to mention if it is implemented correctly, there is no data to even trust them with, given there was zero knowledge of the end user. It would require a governing body to be competent enough to implement it, but I like to dream big

  • source
  • parent