Online age verification is the hill to die on

Original Article ↗ Hacker News Discussion ↗

Governments worldwide are moving toward mandatory online age verification in the name of protecting children from porn, social media harms, and other “adult” content, prompting intense concern about privacy and free speech. Critics argue that tying internet access to government‑backed identity will entrench mass surveillance, chill anonymous expression, and expand corporate data collection, while supporters counter that some form of ID‑based gating is necessary to hold platforms and porn sites accountable for serving minors. Proposed alternatives range from device‑level parental controls and simple content‑rating headers to privacy‑preserving cryptographic attestations, but many fear that lawmakers and major tech firms are instead converging on invasive, hard‑to‑reverse identity infrastructures.

Core concern: age verification as surveillance infrastructure

  • Many see mandatory online age checks as a Trojan horse for universal digital ID and mass tracking.
  • Fear: once accepted for porn/social media, IDs will be required for news, Wikipedia, “sensitive” content, and eventually basic network access.
  • Worry that children will grow up never knowing anonymous exploration or dissent; everything tied to a permanent profile.

Children’s safety vs parental responsibility

  • One camp: protecting kids from porn, grooming, and addictive feeds is a legitimate state interest; holding platforms liable requires some form of age verification.
  • Other camp: harms are real but parenting, device-level controls, and education are the proper response; government/companies shouldn’t become default parents.
  • Some argue “think of the children” is clearly being used as emotional cover for surveillance and speech control.

Alternative technical approaches

  • “Cashier standard”: buy anonymous age tokens or cards in person after ID check; use codes online.
  • HTTP headers (RTA/age labels): servers mark adult or user‑generated content; client devices with parental controls block based on headers, not identity.
  • Anonymous credentials / zero‑knowledge age proofs, often via banks or eID, so sites see only “over 18 = true.”
  • OS/browser‑level age attestation (Apple/Google family settings, credit-card based checks).

Critiques of those alternatives

  • Tokens/cards can be resold at scale online; black markets emerge; enforcement creates new crimes.
  • Headers require global consensus on what is “adult,” are easy to mislabel, and push de facto censorship decisions onto sites or governments.
  • Anonymous-credential schemes struggle to prevent sharing without reintroducing tracking or hardware lock‑in.
  • Any centralized verifier (banks, big tech, ID brokers) gains powerful new behavioral data.

Anonymity, bots, and discourse

  • Privacy advocates: identity tying will chill speech, enable political repression, and cement corporate/government control.
  • Others welcome real‑name or ID‑tied systems to kill botnets, coordinated propaganda, and anonymous harassment; see anonymity as net‑negative today.

Politics, enforcement, and realism

  • Noted trends: coordinated laws across countries; lobbying by large platforms to spread liability and deepen data collection.
  • Examples from Utah, UK, Australia show VPN workarounds, underage influencer loopholes, and kids simply faking ages, while compliant adults lose access.
  • Several are pessimistic: democratic publics want “something done,” and poorly designed laws will likely pass unless better, privacy‑preserving solutions are actively championed.