At least here in Portugal we have a eletronic ID platform that provides some services that could be one of them.

What I was saying was going to that platform or app ( they have a app I think too ) grab a token generated for that website specifically and paste it.

Than the website would receive the token and given a key received by the gov to operate in the contry gets the playload and checks if the person is of age.

I was mentioning the token payload witch would be only the age or a boolean value.

Yeah . . . Now being devil’s advocate faceID would prevent that.

But still if instead of bounding a cert to a device we went to a gov platform for a limited time token/OTP it would work too. It could be shared too but so could u ask ur brother to show up in the facescan before entering a website.

Yeah I was overcomplicating things when a token approach maybe even generated with a card reader or through a gov platform is way more simple.

And would not be hard to implement now that I realise there are many solutions like that such as JWT, SSL, GPG, OTP, etc …

Tbh honest I am against the idea of blocking gov blocking websites.

Parents should be responsible for their kids online presence and exploration using existing tools for such control. For that though people would have to know how to use such tools and unfortunately many do not and there is a lack of programs to teach the parents how to use them.

But I agree with u I am overcomplicating things, was just letting my mind wander and now I am realising that a simple gov generated token or a key with which we could generate such token and pass it to website would be the easier and most logical way like a user pointed out.

This whole ID and face recon honestly could be replaced such system and I would be OK with it.

What I was implying was something local that somehow determined the age of someone, of course such device would have to sign that info with a gov key to limit explotation.

But still everything local, but having to sign the info to make it credible I think like someone suggested a gov issued temp token would be a better solution.

Oh that makes sense an age certificate that only gov can generate. No ties to your identity whatsoever, still one could easily borrow someone else’s. Maybe it could work like JWT or OTPs, go to gov platform generate it being only valid for a couple mins and paste it in the website.