politics
Welcome to the discussion of US Politics!
Rules:
- Post only links to articles, Title must fairly describe link contents. If your title differs from the site’s, it should only be to add context or be more descriptive. Do not post entire articles in the body or in the comments.
Links must be to the original source, not an aggregator like Google Amp, MSN, or Yahoo.
Example:
- Articles must be relevant to politics. Links must be to quality and original content. Articles should be worth reading. Clickbait, stub articles, and rehosted or stolen content are not allowed. Check your source for Reliability and Bias here.
- Be civil, No violations of TOS. It’s OK to say the subject of an article is behaving like a (pejorative, pejorative). It’s NOT OK to say another USER is (pejorative). Strong language is fine, just not directed at other members. Engage in good-faith and with respect! This includes accusing another user of being a bot or paid actor. Trolling is uncivil and is grounds for removal and/or a community ban.
- No memes, trolling, or low-effort comments. Reposts, misinformation, off-topic, trolling, or offensive. Similarly, if you see posts along these lines, do not engage. Report them, block them, and live a happier life than they do. We see too many slapfights that boil down to "Mom! He's bugging me!" and "I'm not touching you!" Going forward, slapfights will result in removed comments and temp bans to cool off.
- Vote based on comment quality, not agreement. This community aims to foster discussion; please reward people for putting effort into articulating their viewpoint, even if you disagree with it.
- No hate speech, slurs, celebrating death, advocating violence, or abusive language. This will result in a ban. Usernames containing racist, or inappropriate slurs will be banned without warning
We ask that the users report any comment or post that violate the rules, to use critical thinking when reading, posting or commenting. Users that post off-topic spam, advocate violence, have multiple comments or posts removed, weaponize reports or violate the code of conduct will be banned.
All posts and comments will be reviewed on a case-by-case basis. This means that some content that violates the rules may be allowed, while other content that does not violate the rules may be removed. The moderators retain the right to remove any content and ban users.
That's all the rules!
Civic Links
• Congressional Awards Program
• Library of Congress Legislative Resources
• U.S. House of Representatives
Partnered Communities:
• News
view the rest of the comments
In Spain you have the cert on an chip embedded in the ID card as you describe but you can also request a downloadable p12 cert that you import in your browser. Most people use the p12 certs because they don't require any additional hardware. From what I read Spanish government proposed solution based on anonymous certs that would only attest your age but wouldn't have any personal information.
On the other side we have the "mandatory ID card" solution which means additional hardware requirement, and, correct me if I'm wrong, it would only work on desktop, right? Do you have ID card readers that work with phones?
Oh I see! Yeah the p12 cert solution would obviously be vulnerable to the "grandma attack"
But it seems weird, because all of us in the EU should have to implement the eIDAS directive right, and our implementation of an eID here in Germany at least is an NFC interface on our national identity cards. So any phone with NFC can be the reader.
If I wanna do my taxes, I touch my ID to my phone, enter my PIN and get logged in.
Granted...that's still a pretty fucked up "auth flow" for when I wanna watch porn 😅
Ok, after checking the Spanish ID also supports NFC, I just never saw NFC readers for them. I think using NFC on your phone/PC to confirm you age by swiping a physical DNI card would work for convenience but I'm still not convinced about security. If you just have to verify your reddit/google/porhub account once kids would just give some 18 year old friend 10 Euros for a single ID swipe. If the entire operation is fully anonymous (you don't know which ID was used) there would be no way to detect this. You would get dozens if not hundreds of accounts verified by the same ID. You would be able to simply setup bunch of age verified Google accounts and sell them online. If you make it possible to track which ID verified given account you will lose anonymity. I don't see a way around it.
You can hook a smart card up to a phone, might need an adapter but it works on Android