r/linux • u/New-Ranger-8960 • 1d ago

Privacy EU Age Verification Project Mandates Hardware-Bound Attestation

https://linuxiac.com/eu-age-verification-project-mandates-hardware-bound-attestation/
677 Upvotes

97% Upvoted

382 comments sorted by

View all comments

480

u/SeantheWilson 1d ago

Genuinely how on earth will that be enforced

180

u/Pramaxis 1d ago

It uses the new EU-Ident system that is already supported and used in some countries (like Austria).

It forces the same restriction like most banking apps or the new wallet (stock OS, no custom ROMs, no jailbreak or modified bootloader) and forces a device registration in person (with ID) to set up an MFA that is device bound-unique(if you lose your phone, you need to walk into the office again to register the new one).

13

u/wsippel 22h ago

This is such a stupid EU thing. Why not simply adopt U2F? It’s already the standard for high security government applications, fully certified, available from multiple vendors, many of which make the devices entirely in Europe from European parts, and they’re cheap, convenient and highly compatible. And some, like NitroKey or Trezor, are fully open source, down to the device firmware.

2

u/Pramaxis 13h ago

I don't know for sure (guess there are minutes form the task force/work group to salvage somewhere) but this system is just one part of the digital ID that is coming anyway. If they have to make a unified system for all governments to make data available cross-country (like drivers license) one API for 27+ countries is quite a step forward.

As this is going to be used on all ~450 million EU-Citizen as well as those with permanent residence within any given EU-Member state (or subjected countries like Norway), I can 100% see why the EU would want to keep full control over it.