The only thing saving you from a hostile government is a well educated populace that really wants democracy and is willing to fight for it (through constant activism, peaceful & other types of protests). This is where many democracies are failing now. No amount of technology or rules can replace large amounts of constantly vigilant eyes that understand how democracy is subverted.
I would rather optimize for not giving companies too much power and end up with a Kafkaesque patchwork of corporate abuses and regulatory captures.
The organisation asks the govt, and gives back a signed token.
The the only thing the government knows is that an age verification was requested. Once verification has been done once for one site, it can be used for future verifications.
There are better ways to do this including zk proofs, but you gotta work against people mass reselling them. Could do some rate limited tokens minted from a proof maybe.
Which pretty much puts an end to any notion of an open internet. But maybe a system I prefer to one where a bunch of random startups have my age verification biometrics .
Yes, but that would then require more infrastructure. For example, Australia does not have a national ID card - or a national proof of age card (each state, however, does implement a Proof of Age card, eg https://www.nsw.gov.au/driving-boating-and-transport/driver-...).
So, what is your zero knowledge based on? Who is the signer?
Under the Identity Verification Services Act 2023 we have IDMatch (https://www.idmatch.gov.au/). This whole setup can simply be extended to have third parties act as an intermediary between the government and the party attempting to get proof of age. Similar to AusPost's DigitaliD (https://www.digitalid.com/personal). But let's not have that company owned by the Government :)
It's pretty cooked that we are asking the social media companies to go ahead and prove to the eSaftey commissioner that they have measures in place to stop kids from getting access to social websites, yet they have to use unreliable measures like selfies to do it. The companies can't win here. This won't be the last you hear of this. https://youtu.be/YTwBStZIawY?t=306
Government runs authentication service that has your personal details.
User creates account on platform Y, platform Y asks government service if your age is >18, service says y/n. Platform never finds out your personal details.
OAuth for age verification.