• 3 Posts
  • 15 Comments
Joined 2 years ago
cake
Cake day: October 19th, 2023

help-circle



  • In general, we accept that the Government already knows who you are, how old you are, and where you live. That’s already a given. The purpose of a zero-knowledge age verification scheme is to allow a third party (not the Government) to be confident that a person is an adult, without being given any additional information or being able to deduce any additional information from what they’re given. So essentially, they get only 1 bit of information: whether the user is an adult (true/false). In practice, a perfect system is not possible, since the fact that you receive a response also means you get the answer to related questions, like whether the user possesses a Government-issued ID (obviously “true” if they can successfully complete the verification).

    So, here’s how such a scheme might work. There are many possible implementations.

    In the United States, we have (optional) digital ID cards. These are added to one’s digital wallet in a similar manner to payment cards and can be used for things like buying alcohol, getting through airport security, and driving. This digital infrastructure can be re-used.

    1. An organisation which wants to perform digital identity verification generates a cryptographic key pair and registers the public key with a Government server ahead of time. The public key is published to a Government-run public keyserver.
    2. A website who wants to verify a user’s age sends a verification request to a Government server, digitally signed with their private key. The server responds with a request ID, which is a random, but unique, string of characters.
    3. The website provides this string to the user. The user copies the string.
    4. The user opens their digital wallet, selects their ID card, and then opens the age verification feature. The user pastes the request ID into their digital wallet, which fetches information about the request from the Government server. Because the request which the request ID is associated with was signed using the organisation’s private key, the Government can tell the user who initiated the request.
    5. The user is asked to confirm/deny the age verification request. If the user confirms the request, then a biometric will be required to access their private key (these are stored in the device’s keystore), sign the approval response, and then sent that response to the Government server. The Government server checks that the signature is valid and tied to the key associated with that ID before marking the verification request as completed.
    6. After confirming, the user returns to the website and clicks a button which says “I’ve completed the verification.” The website then queries the request ID with the Government server (again, signing the request with their private key). The Government server responds with “completed” if the user has accepted the request, or “not completed” if the user has either not yet accepted the request or denied it.







  • There is no such thing as a “Scottish pound” (unless you refer to the pound Scots, which was the currency of Scotland prior to its union with England). The currency of the United Kingdom is called sterling and the banknotes are all denominated in pounds sterling with currency sign GBP.

    All banknotes of the pound sterling are issued by banks. By far the largest issuer of banknotes is the Bank of England, which is the central bank of the United Kingdom. It also happens to be the only banknote issuer in England and Wales.

    In Scotland, some private banks are permitted to print their own banknotes. These banknotes are fully redeemable at the banks which issued them for Bank of England notes or for coins. This is what “I promise to pay the bearer on demand the sum of £__” means. Within Scotland, notes issued by Scottish banks are generally regarded to be interchangeable with those issued by the Bank of England. It is always up to the merchant, anywhere in the UK, whether they wish to accept Scottish issued banknotes, or only Bank of England notes, or no banknotes at all (card payments only).

    Many larger shops in England will recognise and accept Scottish banknotes. English banks will generally accept them for deposit. Smaller merchants may not recognise them and refuse them. Again, merchants are never legally obligated to sell you anything in exchange for your banknotes, regardless of who issued them.


  • MMP for me. Produces results which are broadly regarded as fair and easily to understand, but does not result in an excessively long ballot paper or confuse voters.

    My city recently implemented single transferrable vote for local council elections. It resulted in voters receiving a ballot paper asking them to rank over a dozen candidates and the response to this by voters was quite negative because they felt that the process of intelligently researching and comparing that many candidates was unnecessarily laborious and people found the electoral system confusing.

    Many people gave up and just marked a single candidate or got confused and didn’t bother voting at all. This was for an election where each ward returned three councillors. CGP Grey actually criticised implementations if STV where each constituency returns only three representatives, insisting it should be five, or more. In a world of short attention spans, we have to accept that asking people to research potentially 20 candidates and even just pick their top five will result in a large number of people getting frustrated and giving up.

    It’s all well and good to have a system which is mathematically optimal in your view, but the problem is that elections also have to retain the confidence of the voters to be effective, and if voters cannot understand a highly-complex system then they will not have confidence in its fairness and will be easily tricked by people with ulterior motives who tell them it’s actually rigged against them.