1137
Pornhub Sues Texas Over Age Verification Law
(www.vice.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 11 Aug 2023
1137 points (97.6% liked)
Technology
55919 readers
2579 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
Age verification for pornography has something like a 70% approval rating. It’s not a religious extremism issue, it’s a “normies don’t want or care about their freedoms issue”.
The concept is not terrible, the implementation is. Passing this law with no secure way of proving identity is where it’s clearly just a Christo-fascist power move.
The only implementation I would support is one where the asking website doesn't know your ID, and the verifying website doesn't know what you're trying to visit. Essentially just asking for a one-time use token that verified your age, and providing that token to the website you're trying to visit.
Edit for a bit more detail: User authenticates to ID website, which provides them a token with age verification (true/false) and a short (10 minute?) TTL. This token is encrypted by the ID website. User then provides this token to the asking website (eg: pornhub). Pornhub then sends the token back to the ID website to decrypt it. All pornhub knows about you is whether or not you're of age, and the verifying website never knows what the token is for.
There would be too much value in tracking that token for such a scheme to stay secure. Governments or shady corporations or illegal black markets or all of the above would be all over keeping tabs on what sites are visited by which tokens and matching them to identities.
The whole point is that the token itself doesn't have any personal info attached to it, only a yes/no and expiry time.
I'll even one up my original suggestion - it uses standard public/private key encryption, where the government issues a simple json token with a yes/no Boolean and a TTL. The public key that can decrypt the tokens is public. Pornhub then decrypts the token and verifies the boolean and expiry date, all without talking to the government at all.
ISPs already have, and do sell that data.