Get the latest tech news
Show HN: Anonymous Age Verification
GitHub Gist: instantly share code, notes, and snippets.
Endpoint: https://<bank-domain>/.well-known/age-verification-key.json Format: JWK Set (include current and grace‑period keys) Caching: Reasonable TTL (e.g., 1h) + fast rotation path Hash: SHA‑256 Sign: ES256 (P‑256) Nonce: ≥128 bits entropy; HMAC‑SHA256 with secret; include version + timestamp Token TTL: ≤5 minutes WebAuthn: UV required; fresh credential per check; no attestation Tiny bank issuer reference server Merchant verifier lib (TS) Browser helper (nice copy/paste + WebAuthn UX) Threat modeling & red‑team notes Test vectors & conformance cases
Or read this on Hacker News