You are changing the goal. The point of this is to provide THE USER with a solution where they don’t have to give away their personal information to the Government or the 3rd Party site. We do not care about situations where users commit crimes as that means our focus is on the Government’s needs which they would already have met by just implementing a “Show us your ID” solution.
Now you could make the pin be a biometric so it’s physically connected to the user. But part of the solution needs to be that the token is not identifiable with the user. If I pull of my wrist band no one will know it was mine. If you throw out your token someone could go around testing everyone’s fingers and find out it was yours.
Without ensuring that the key issued to one person is not used by another, the key does not prove the age of the user, and isn’t that the whole point of the key?
no, the point of the key is to access infomatîon without giving away personal information.
Even a photo ID doesn’t prove age. It just shows a record of what age the gov thinks someone is. They are still prone to forgery, misuse, etc. There isn’t any actual method of showing someone’s age so we can skip that part and focus on what the actual need of the user is, accessing a website while not handing over more personal information than is necessary.
What website is going to accept a key that doesn’t prove someone’s age though? We already have buttons that say “I’m over 18”. How this key better than that?
You are changing the goal. The point of this is to provide THE USER with a solution where they don’t have to give away their personal information to the Government or the 3rd Party site. We do not care about situations where users commit crimes as that means our focus is on the Government’s needs which they would already have met by just implementing a “Show us your ID” solution.
Now you could make the pin be a biometric so it’s physically connected to the user. But part of the solution needs to be that the token is not identifiable with the user. If I pull of my wrist band no one will know it was mine. If you throw out your token someone could go around testing everyone’s fingers and find out it was yours.
Without ensuring that the key issued to one person is not used by another, the key does not prove the age of the user, and isn’t that the whole point of the key?
no, the point of the key is to access infomatîon without giving away personal information.
Even a photo ID doesn’t prove age. It just shows a record of what age the gov thinks someone is. They are still prone to forgery, misuse, etc. There isn’t any actual method of showing someone’s age so we can skip that part and focus on what the actual need of the user is, accessing a website while not handing over more personal information than is necessary.
What website is going to accept a key that doesn’t prove someone’s age though? We already have buttons that say “I’m over 18”. How this key better than that?