this post was submitted on 15 Apr 2026
398 points (96.9% liked)

Technology

83831 readers
3661 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] Dsklnsadog@lemmy.dbzer0.com 105 points 1 day ago (4 children)

I get why this sounds better than websites directly collecting IDs, but I think it still understates the problem. Even if the site only sees “18+”, the system still begins with strong identity proofing somewhere upstream. So this is not really anonymous access, it is identity-based access with a privacy layer on top.

The bigger issue is centralization. You still need trusted issuers, approved apps, approved standards, and authorities deciding who can participate. That means users are being asked to trust a centralized framework not to expand, not to abuse its power, and not to fail. History gives us no reason to be relaxed about that.

I am also skeptical of the privacy promises. These systems are always presented in their ideal form, but real-world implementations involve metadata, logging, renewal, compliance rules, vendors, and future policy changes. “The website does not know who you are” is only one small part of the privacy question.

So even in the best-case version, this is still dangerous because it normalizes the idea that access to lawful online content should depend on credentials issued inside a centrally governed identity ecosystem. Today it is age verification. Tomorrow it is broader permissioned access to the internet. That is why I do not see this as a decent compromise, but as infrastructure for future control.

[–] fluffykittycat@slrpnk.net 24 points 1 day ago (1 children)

Also once they get their foot in the door, they can remove the privacy next time they want to unmask someone online saying "I support Palestine action"

[–] Valmond@lemmy.dbzer0.com 4 points 12 hours ago

-"You want to crack down on dissent? We got a token for that."

Apple or something.

[–] myplacedk@lemmy.world 6 points 20 hours ago (1 children)

I do see your concerns as valid. But at least in my country, we already have all of that.

I have an app I use to id myself to all sorts of stuff. Almost all of us has that. All the changes you mention are not changes, we have already had that for years. The new thing is that you don't give your id to the website.

Just like during the pandemic, we had an app to prove our vaccination status, without revealing id. Before that we had to prove id, and then they looked up vaccination status.

[–] Valmond@lemmy.dbzer0.com 1 points 12 hours ago

Sweden or Estonia?

[–] linule@lemmy.world 1 points 20 hours ago* (last edited 20 hours ago)

As far as I understand, there’s no need for “verified apps”. The third party just verifies your token with the emitter.