Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

PICS and ICRA were not adopted by many due to complexity. RTA [1][2] is a more generic header that can be used on any adult site or site that allows user contributed content and is easier to implement. There needs to be a law that requires clients to look for this header if parental controls are enabled. Not perfect, nothing is. Teens will easily get around it but most small children will not which should be the spirit of the ID verification movement. It's better than what we have today. The centralized ID verification sites will push many small sites to Tor and bigger sites to island nations and tax evasion in my opinion. More browsers are natively supporting .onion domains.

Congress critters should be opposed to the centralized ID verification systems as their browsing habbits will be exposed to the world when those sites ooopsie dooopsie "leak" the data or just openly sell it or an employee turns that data into a summarized online spreadsheet of who is into what. The kickbacks and lobbying they may be potentially receiving will not be worth it.

[1] - https://www.rtalabel.org/index.php?content=howtofaq#single

[2] - https://www.shodan.io/search?query=RTA-5042-1996-1400-1577-R... [dont follow the links, NSFW]



> There needs to be a law that requires clients to look for this header if parental controls are enabled

Would that require MiTM at the network level? Or, is there a custom X.509 RTA that would tell clients not to accept the certificate?


Put it in the parental controls feature of the browser. Parents have to turn it on. Parents get to decide if their kids can watch porn. The government helps parents enforce the rules parents want.


I wonder if I can detect when parental controls are engaged like that.

As of this ruling, all sites within striking distance of South Dakota must take “reasonable efforts” to age-verify, or be certain that no content could ever be politically harmful to the hypothetical minor.


Reasonable efforts in this case would be to send the RTA header. That's it. Done and dusted. If the client is able to browse your site that would mean that either parental controls are not enabled or they are enabled and your site was approve-listed in the client. This of course depends on changing the laws anywhere that require using a third party data-leakage site to verify ID.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: