434

The new age verifying app for the EU will only accept Google Play integrity for Android, de-facto banning any aftermarket OS like GrapheneOS (github.com)

submitted 4 days ago by schizoidman@lemmy.zip to c/privacy@lemmy.ml

39 comments fedilink hide all child comments

cross-posted from: https://sh.itjust.works/post/42943610

Taken from the readme of the app on github:

The current release provides only basic functionality, with several key features to be introduced in future versions, including:

App and device verification based on Google Play Integrity API and Apple App Attestation

Additional issuance methods beyond the currently implemented eID based method.

These planned features align with the requirements and methods described in the Age Verification Profile.

There is an issue opened to remove this as it's basically telling us that to verify our age in the EU an American corporation has the last word, making it not only a privacy nightmare but a de-facto monopoly on the phone market that will leave out of the verification checks even the fairphone (european) with /e/os.

you are viewing a single comment's thread
view the rest of the comments

[-] xthexder@l.sw0.com 15 points 4 days ago

There's a big difference between a reference implementation and a proof of concept. A proof of concept just shows it's possible at all, but a reference implementation is meant as a reference for "you should do it this way". Expect most companies to just directly copy the reference because they'll feel it's a waste of time developing their own system that's in compliance.

[-] ell1e@leminal.space 13 points 4 days ago* (last edited 4 days ago)

This is definitely going to be copy&pasted as a foundation in many EU states. Therefore, that it requires Android and iOS at all, let alone Google Play, is a fundamental error. Some people avoid smartphones for good reasons, yet still access parts of the internet that may apparently soon be gatekept by this new age verification mechanism. Also see here.

[-] utopiah@lemmy.ml 3 points 4 days ago* (last edited 4 days ago)

Sure it's beyond a proof of concept and others will definitely heavily rely on it yet my point still stand, i.e no one is supposed to install this built app directly. As I also said yes it's wrong to rely on Google and Apple in general but even more so with talks of EU sovereignty so I'm not giving them any slack for that. What I'm still insisting on is that this repository is not the app people will have to use.

this post was submitted on 28 Jul 2025

434 points (99.8% liked)

Privacy

40374 readers

552 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS