Same, i could find some info about them using digital id for ease of bureaucracy as well as privacy, but i couldnt find a good explanation of the system itself
Comment on All this for a banana bread recipe
QuizzaciousOtter@lemmy.dbzer0.com 5 days agoYeah, I know I could look it up. But since you brought this up, care to briefly explain the Estonian system?
Ikon@sh.itjust.works 4 days ago
Kraiden@piefed.social 4 days ago
Hey, I’ve replied to the parent comment with a description of how it works
Kraiden@piefed.social 4 days ago
Sure! I’m far from an expert, but this is my understanding of how it would work for age verification:
There are 3 parties in this scenario. The Estonian state, Meta, and a 3rd party (which is currently a real 3rd party, but work is being done to allow this to be a digital wallet on your device, that you control)
The state issues your 3rd party a magic cryptographic cert that has all your personal data like dob
Meta issue an age challenge: Not “what’s your dob” but rather “Are you old enough to use this service?”
3rd party show you exactly what Meta are requesting and give you the option to approve or deny the request
If you approve, the 3rd party generate a new cert that JUST says “Yes I’m of age” and nothing else.
Because it’s been generated from the states magic cert it can be verified with their public key.
Meta don’t get more info than they need, the state can’t see that you’ve logged into Meta, but you’ve successfully proved you’re old enough to use the service.
The current weak point is that the 3rd party can absolutely see all of it, but there’s no reason the 3rd party has to be an external service. It could absolutely be an app on your device.
You still need to prove yourself to the state, but you’d have to do that to get an id card in the first place. It’s WAAAAY better than trusting all the different porn sites and social media services individually to not leak or misuse your data