An identity provider can make verified age one of the claims on an OAuth token. It removes anonymity, but at least you don't have to provide your personal details to everybody on the internet demanding age verification. You provide those details to your trusted identity provider, they provide the claim of your age to the website. With that in place we can easily make beer, liquor, marijuana and tobacco sales on the i…
A much better solution than was suggested by PornHub: > PornHub said that a better solution is to identify users by their device. Fingerprinting is not and should not be the sanctioned way of identifying people. On the engineering side, it is a horrible hack. On the ethical side, it is much worse to ( attempt to) fingerprint since it tells PornHub waaay more than just age.
If I understood PornHubs proposal correctly they want to only provide the content if your browser does not send a "Child-Mode" flag or something. Given that parents should introduce children to their first mobile devices and guide them, setting this flag seems not to be so hard. Just set at account creation "minor: true" and done, or am I missing something?