EU Age Verification Project Requires Hardware-Bound Attestation, Sparking Open-Source Backlash

EU Age Verification Project Mandates Hardware-Bound Attestation

The EU's open-source age-verification project has mandated hardware-bound attestation, raising concerns among Linux and custom ROM users. A maintainer confirmed the requirement is non-negotiable, citing the need to prevent credential copying. Critics argue it undermines openness by relying on approved devices and attestation providers. The project will publish a security review and threat model, but the central tension remains: can an EU-funded open-source identity system stay open when real-world access depends on restricted hardware and policies?