←back to thread

693 points macawfish | 3 comments | | HN request time: 0.001s | source
Show context
al_borland ◴[] No.44544145[source]
All these ID check laws are out of hand. Parents are expecting the government, and random websites, to raise their kids. Why would anyone trust some random blog with their ID?

If these laws move forward (and I don’t think they should), there needs to be a way to authenticate as over 18 without sending picture of your ID off to random 3rd parties, or giving actual personal details. I don’t want to give this data, and websites shouldn’t want to shoulder the responsibility for it.

It seems like this could work much like Apple Pay, just without the payment. A prompt comes up, I use some biometric authentication on my phone, and it sends a signal to the browser that I’m 18+. Apple has been adding state IDs into the Wallet, this seems like it could fall right in line. The same thing could be used for buying alcohol at U-Scan checkout.

People should also be able to set their browser/computer to auto-send this for single-user devices, where it is all transparent to the user. I don’t have kids and no one else’s uses my devices. Why should I need to jump through hoops?

replies(36): >>44544207 #>>44544209 #>>44544223 #>>44544253 #>>44544375 #>>44544403 #>>44544619 #>>44544667 #>>44544797 #>>44544809 #>>44544821 #>>44544865 #>>44544875 #>>44544926 #>>44545322 #>>44545574 #>>44545686 #>>44545750 #>>44545798 #>>44545986 #>>44546467 #>>44546488 #>>44546759 #>>44546827 #>>44547088 #>>44547591 #>>44547777 #>>44547788 #>>44547799 #>>44547881 #>>44548019 #>>44548400 #>>44548482 #>>44548740 #>>44549467 #>>44560104 #
1. dcow ◴[] No.44548019[source]
> Parents are expecting the government, and random websites, to raise their kids.

(1) Without addressing the general statement, specifically this isn't new. You’ve historically not been allowed to buy pornography or cigarettes or alcohol without age verification or watch obscene content between the nightly news runs. I don't see this specifically as parents wanting the government to raise their kids at all. It’s people without any other real options wanting to make it more difficult for inappropriate material to end up in the hands of minors. When I was 12 I remember getting online with AOL discs and having popups with porn appear in front of me as I’m playing neopets, because some unsavory ad got accidentally “clicked” many sessions ago. How can a parent “parent” that?

> If these laws move forward (and I don’t think they should)

(2) These laws already exist, the internet was a loophole. If it’s done right you verify your age when you make your account and the site doesn’t bug you again. Not sure how frequently you’re visiting new porn sites, but I can’t imagine getting over prompted would be a real problem.

(3) There is a concept of using ZKPs to do more things client side. However I think currently people are more excited about selective disclosure. You just give the site a signed claim that you’re over 18 and that’s all they know. It’s more private than handing over your DL at the grocery store checkout.

> People should also be able to set their browser/computer to auto-send this for single-user devices, where it is all transparent to the user.

They should, shouldn’t they. But some privacy nut out there will say we can’t have nice things because an advertiser might use it to profile you.

Really though one aspect of digital identity is presence and liveliness checking. The states that issue your ID to Apple Wallet are only willing to do so because Apple ensures that the user presence is verified at time of use.

The question isn’t why should you have to jump through hoops, it’s why should we enforce age restrictions in person but not in the internet—why haven't you had to jump through all the existing hoops to watch internet porn until now?

replies(1): >>44548173 #
2. sigwinch ◴[] No.44548173[source]
1) it doesn’t go as far back as you think. Only within my lifetime did the drinking age settle on 21. The Feds couldn’t do it directly, so they hacked highway funds. So that’s a bad example when porno has changed so much. What we’re risking here is parents who haven’t tried any solutions being convinced that litigation is the only way.

2+3. A simple cookie with a birth year ought to work. Why should every site worry about South Dakota’s definitions when checking a cookie seems reasonable effort. Circumvention of that is already fraud.

replies(1): >>44548249 #
3. dcow ◴[] No.44548249[source]
I said decades not centuries.

A cookie with a birth year is not a cryptographic verification of a digital identity document. Anybody can click “I’m over 18”.