ONE - Anonymous Identity Infrastructure
Show HN: Anonymous age verification with passkey-powered encryption
ONE is a privacy-first identity infrastructure that enables anonymous age verification and proof of personhood using passkey-powered encryption. Users verify their identity once, and their sensitive data remains encrypted with user-held keys, ensuring that even ONE cannot access it. Applications receive only the required proof, such as "18+" or "verified person," without any PII. This innovative approach solves the privacy dilemma of traditional verification methods, offering a reusable, one-tap solution for businesses and users alike.
Privacy, rebuilt for a strange new world. Only you hold the keys to your data.
- tangotaylor
> When identity documents are uploaded, they are encrypted using a master encryption key derived from the user’s passkey during authentication.
ONE still sees identity documents in the clear the first time when it verifies them, right? Otherwise we could upload fakes.
Also I'm not familiar with Oauth 2.0, but doesn't ONE know the client and relying party on each verification transaction? So ONE could theoretically store records of who accessed which website, perhaps by mistaken logging configuration or because they were coerced by law enforcement.
Anyway I appreciate the consideration given to privacy.
- thcr
"One stores ciphertext: encrypted blobs created with a key held by the user. Never the underlying identity data. This includes government ID and selfie data, as well as the verified email associated with the account. "
Why does it need to store even encrypted data after the result is +18, for example? Does ONE need to keep validating against the same documents every time?
- mikeysight
I wrote up more of the thinking behind this here for those interested:
https://loginwithone.com/blog/the-internet-should-be-more-li...