From my understanding this age verification app seems to be based on the age verification blueprint they have been working on for a while now, which is supposed to be part of the European "digital wallet"
https://digital-strategy.ec.europa.eu/en/policies/eu-age-verification
From my understanding it works as follows:
- There will be a central "authority", with which you can identify
- This authority will provide you with tokens indicating you are 18+ (or whatever age verfication you may need)
- These tokens are stored locally, and contain no identifying information other than a simple "is this guy 18+?"
- You can use these tokens to verify age with a website that requires age verification
This solution does seemingly address my two greatest concern with online age verficiation:
- You cannot trust the website, so they only get the information they need. They don't get any identifiable information
- You cannot trust the authority, so they don't get to know for which websites and for what reason you request 18+ tokens
Assuming that this blueprint is followed, it seems like a decent approach at online age verification.