you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 1 year ago (4 children)

I gave an example in the previous post how the identity of the user could be hidden from the service.

In both your examples the government service has your full identity, then pinky promises to forget it.

Unless I'm misunderstanding something?

It would be a lot easier to get that information from the ISP.

Not quite the same, as IP addresses are shared through NAT, VPNs exist, etc. With the proposed legislation it is illegal for website operators to deliver content to known VPN ips, as they cannot confirm that the end user isn't a EU subject.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 1 year ago (3 children)

    In both your examples the government service has your full identity, then pinky promises to forget it.

    It can be like buying alcohol in a store. They look at you and see your age. Or if it's unclear, the store clerk asks your idea and promptly forgets all about it. Except you're not buying alcohol but a login for some age verifier.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 1 year ago* (last edited 1 year ago) (2 children)

    So yes, they get your identity, then promise to forget it.

    That's a worst of both worlds proposal: it makes it trivial to deanonymise people, and it doesn't solve the replay attacks.

  • source
  • parent
  • hideshow 2 child comments