On: Never Give Them Your Face

[Nevermark]

I am fine with device vouched sessions. That protect my and my devices' identities.

> You can just lie by using someone else's ZKP.

Yes, it is trivial to share access/identity, purposely or carelessly.

Not sure what point you are making, since that isn't specific to ZKP.

[inigyou → Nevermark]

If it's not ZK you can get arrested for sharing it

[Nevermark → inigyou]

I assume you mean more likely arrested? Since legal liability would be the same.

Logs of identity vs. access history being useful for investigating sharing? What kind of logs does California State keep?

[inigyou → Nevermark]

None, presumably, since age verification is illegal there.

[Nevermark → inigyou]

> If it's not ZK you can get arrested for sharing it

What is the scenario where not using ZKP's gets you arrested. Who is collecting what information?

[inigyou → Nevermark]

I am John Smith, I give out my non-ZK age tokens, I get arrested because 200 people logged in as me today

[Nevermark → inigyou]

You didn't answer who is collating all that arrest-targeting information.

It isn't news that adults can be irresponsible with age-verification credentials.

Letting children use adult's credit cards isn't criminalized either.

Adult sites not default-serving underage users does not require fine-grained surveillance or criminalizing clueless parents/adults.

[inigyou → Nevermark]

The government, obviously, when the sites call it to check their tokens

[Nevermark → inigyou]

You are describing strong surveillance. Exactly the problem ZKP (or similar tech) solves/avoids.

And on the other issue, requiring sites to verify ages before serving adult material, isn't the same as criminalizing shared/mishandled age verification credentials. Its a mitigation issue, not a nuclear threat.

I am left wondering if you had any coherent point to make.