04:40:29 RRSAgent has joined #age-restrictions 04:40:33 logging to https://www.w3.org/2025/11/12-age-restrictions-irc 04:40:33 RRSAgent, do not leave 04:40:34 RRSAgent, this meeting spans midnight 04:40:34 RRSAgent, make logs public 04:40:36 Meeting: Age-Based Restrictions Have Come for the Web 04:40:36 Chair: Tara Whalen, Benjamin VanderSloot 04:40:36 Agenda: https://github.com/w3c/tpac2025-breakouts/issues/75 04:40:36 Zakim has joined #age-restrictions 04:40:37 Zakim, clear agenda 04:40:37 agenda cleared 04:40:37 Zakim, agenda+ Pick a scribe 04:40:38 agendum 1 added 04:40:38 Zakim, agenda+ Reminders: code of conduct, health policies, recorded session policy 04:40:38 agendum 2 added 04:40:38 Zakim, agenda+ Goal of this session 04:40:40 agendum 3 added 04:40:41 Zakim, agenda+ Discussion 04:40:41 agendum 4 added 04:40:41 Zakim, agenda+ Next steps / where discussion continues 04:40:42 agendum 5 added 04:40:42 Zakim, agenda+ Adjourn / Use IRC command: Zakim, end meeting 04:40:42 agendum 6 added 04:40:42 breakout-bot has left #age-restrictions 04:54:22 denkeni has joined #age-restrictions 05:02:12 bvandersloot has joined #age-restrictions 05:14:57 breakout-bot has joined #age-restrictions 05:14:59 RRSAgent, do not leave 05:15:00 RRSAgent, this meeting spans midnight 05:15:01 RRSAgent, make logs public 05:15:02 Meeting: Age-Based Restrictions Have Come for the Web 05:15:02 Chair: Tara Whalen, Benjamin VanderSloot 05:15:02 Agenda: https://github.com/w3c/tpac2025-breakouts/issues/75 05:15:02 Zakim, clear agenda 05:15:02 agenda cleared 05:15:02 Zakim, agenda+ Pick a scribe 05:15:03 agendum 1 added 05:15:03 Zakim, agenda+ Reminders: code of conduct, health policies, recorded session policy 05:15:03 agendum 2 added 05:15:04 Zakim, agenda+ Goal of this session 05:15:05 agendum 3 added 05:15:05 Zakim, agenda+ Discussion 05:15:05 agendum 4 added 05:15:06 Zakim, agenda+ Next steps / where discussion continues 05:15:07 agendum 5 added 05:15:07 Zakim, agenda+ Adjourn / Use IRC command: Zakim, end meeting 05:15:07 agendum 6 added 05:15:07 breakout-bot has left #age-restrictions 05:31:24 bvandersloot has joined #age-restrictions 05:37:29 tantek-projector has joined #age-restrictions 05:38:20 phila has joined #age-restrictions 05:38:49 mt_hates_irc has joined #age-restrictions 05:40:04 smcgruer_[EST] has joined #age-restrictions 05:40:11 tara has joined #age-restrictions 05:41:26 AramZS has joined #age-restrictions 05:42:08 hadleybeeman has joined #age-restrictions 05:43:27 tmaruha4 has joined #age-restrictions 05:44:33 q? 05:44:37 present+ 05:44:48 present+ 05:45:50 present+ 05:46:07 npdoty has joined #age-restrictions 05:47:10 The Zoom is acting up a bit, please stand by... 05:47:47 ErikAnderson has joined #age-restrictions 05:51:09 I guess I can scribe since I have more Internet access 05:51:14 snek has joined #age-restrictions 05:51:36 yasushi_sony has joined #age-restrictions 05:51:40 sid has joined #age-restrictions 05:51:48 manu_ has joined #age-restrictions 05:51:53 s has joined #age-restrictions 05:51:53 Rene has joined #age-restrictions 05:51:58 present+ 05:51:59 present+ 05:52:04 present+ 05:52:21 scribe+ 05:52:26 PZ has joined #age-restrictions 05:52:29 timcappalli has joined #age-restrictions 05:52:29 ErikAnderson has joined #age-restrictions 05:52:34 present+ 05:52:36 syllaal has joined #age-restrictions 05:52:37 present+ 05:52:38 pascoe has joined #age-restrictions 05:52:40 dezell has joined #age-restrictions 05:52:46 alexmt has joined #age-restrictions 05:52:47 Nishant has joined #Age-restrictions 05:52:48 present+ David-Ezell 05:52:54 kmoon has joined #age-restrictions 05:52:56 Present+ 05:52:58 present+ 05:53:02 present+ 05:53:02 sarahj has joined #age-restrictions 05:53:03 zgroza has joined #age-restrictions 05:53:07 reillyg has joined #age-restrictions 05:53:10 ErikAnderson6 has joined #age-restrictions 05:53:20 present+ 05:53:20 ben: agenda: workshop summary to start 05:53:21 rbyers has joined #age-restrictions 05:53:24 present+ ErikAnderson 05:53:27 devlin has joined #age-restrictions 05:53:37 Topic: Debrief from workshop 05:53:55 IAB + W3C jointly ran the workshop: get people from different groups under Chatham House style venue to talk about problem 05:53:59 present+ 05:54:19 regulatory folks, child safety orgs, browser vendors etc 05:54:41 lot of considerations to think about, many intersecting components 05:54:53 insert obligatory avenue Q reference 05:56:12 Group provided several ideas of the major impacts, e.g., phishing risk from data collection 05:56:46 properties of good solutions, e.g., purpose-limitations of data collected 05:57:04 want to be based on open standards 05:57:05 ErikAnderson has joined #age-restrictions 05:57:22 q? 05:57:48 Topic: architectural groundwork 05:57:58 [We see a diagram of content -> service -> network -> device -> user] 05:58:38 Roles in enforcement: verifier; enforcer; policy selector; content rater 05:59:09 dveditz has joined #age-restrictions 05:59:19 Nick: lot of architectural options 05:59:37 ...roles can be spread across different parties, or grouped together 05:59:49 ...or cooperative arrangements 06:00:32 ex: "signalling" - device to signal to service "I am a certain age, so serve me certain content" 06:00:57 ...content rating can be done by service (knows the context of the content) 06:01:07 manu_ has joined #age-restrictions 06:01:22 ve7jtb has joined #age-restrictions 06:01:35 ...existing work: declared age-range API, see CA law which mandates age range be supported 06:01:53 labelling switches these roles, e.g., parental controls 06:02:05 ErikAnderson has joined #age-restrictions 06:02:22 phila has joined #age-restrictions 06:02:29 present+ 06:02:38 q+ to talk about labeling 06:02:43 dezell has joined #age-restrictions 06:02:44 service can signal the type of content, can be enforced at device (does not serve it under policy) 06:03:38 credential-based age proof: issuer of credential, verifies user's age 06:03:42 michaelficarra has joined #age-restrictions 06:04:00 q? 06:04:04 q+ 06:04:06 Topic: Open discussion 06:04:10 q? 06:04:15 ack phila 06:04:15 phila, you wanted to talk about labeling 06:04:25 Ehsan has joined #age-restrictions 06:04:33 jugglinmike has joined #age-restrictions 06:04:34 present+ 06:04:35 @phila: worked on this for a long time (25 yr), "Internet Content Rating Assoc 06:04:46 q+ 06:04:46 ...labelling does not work (based on my experience) 06:05:11 michaelficarra0 has joined #age-restrictions 06:05:14 ...is like P3P. What do you do about unlabelled site/content. 06:05:27 q? 06:05:34 q+ on brainstorming possible work, not on stopping every proposed area of work 06:05:37 verifiable credentials is more promising (limited disclosure) 06:05:43 jugglinmike has joined #age-restrictions 06:05:45 Nina: How does VC if content provider doesn't want to play? 06:05:50 michaelficarra2 has joined #age-restrictions 06:05:56 Phil: Absolutely doesn't work if they don't want to play. Same problem. 06:05:59 q+ 06:06:14 ... There are many harms beyond adult content, as you said 06:06:41 ... We need to do something about it, but bad actors will be bad actors 06:06:45 alexmt has joined #age-restrictions 06:06:49 q? 06:07:06 can we have a way to get on the queue without internet connection? I keep getting booted off 06:07:32 q? 06:08:03 manu_: Wanted to point out some work in the area (sorry we weren't at the workshop) 06:08:12 ... ??? is from the True Age program, non-profit in USA, age verification platform using VCs 06:08:20 ... Been in production 2 years, 150k retail locations in USA 06:08:28 manu_ has joined #age-restrictions 06:08:34 ... There are people at W3C with deep experience with age-gating 06:08:38 bvandersloot has joined #age-restrictions 06:08:42 ... It is retail, not online, but it is using VC 06:08:43 sarahj has joined #age-restrictions 06:08:45 manu_ has joined #age-restrictions 06:08:51 Platform: TrueAge 06:08:53 ... We should take those learnings into account 06:08:56 dezell has joined #age-restrictions 06:08:58 q? 06:09:00 ack manu_ 06:09:07 present+ jugglinmike 06:09:15 present+ 06:09:27 manu_: There are some very large players in this space already 06:09:36 ... ??? sells 55% of alcohol in USA 06:09:40 ... They serve millions of age checks a day 06:09:47 ... They already have published standards for this 06:10:01 ... I hope whatever work is done next, coordinates with True Age, with ???, with the VC working group 06:10:14 ???: +1, would be nice if we could graduate from underage to age appropriate 06:10:18 q? 06:10:51 ack AramZS 06:11:01 q+ 06:11:06 mt_hates_irc has joined #age-restrictions 06:11:10 AramZS: +1 to what was said about labeling - anything that requires that an external entity be labelling the age safety or content on the web is unworkable 06:11:15 ... A lot of free speech problems 06:11:37 ... The way this should work is if I believe my content is 18+, i should be asking if this person is 18+, not waiting for someone else to rate me 06:11:41 Ben: That means you're rating yourself 06:11:54 AramZS: Whole range of rating is problematic - movies, comics, etc 06:11:55 National Association of Convenience Stores (NACS) was one of those references from Manu 06:12:03 ... People are put in spaces that are bad, that creates corruption 06:12:12 ... It should be self-attested 06:12:29 ???: Unfortunately the legistlation does not agree with you in many countries 06:12:32 self-attested would be an example of content rating by the service provider 06:12:35 s/legistlation/legislation 06:12:35 manu_ has joined #age-restrictions 06:12:45 AramZS: Want to make sure we're not adding tools to allow others to [missed this] 06:12:55 q? 06:12:55 s/???:/aram zucker-scharff:/ 06:13:10 q? 06:13:11 oops, that's not good, that was Hadley Beeman instead 06:13:14 actually that reply was hadley 06:13:21 many businesses already do this, for existing parental controls, whether we like it or not (both self-rating and labeling others, with kinds of heuristics) 06:13:31 s/[missed this]/rate us 06:13:39 ???: Framing for this workshop, for me, this was a workshop we should have held years ago 06:13:51 s/aram zucker-scharff/Hadley Beeman/ 06:13:54 ... The technical community keeps saying we won't engage, but this is what happens when we don't engage 06:13:57 s/???/mnot 06:14:01 (dunno if that works) 06:14:08 tmaruha4 has joined #age-restrictions 06:14:08 ... Its not what we're going to introduce here, it's already here, and we're going to be stuck with what is here 06:14:19 ... So we have to hope that the current thing eventually fails, and we build a good thing that can be adopted next 06:14:37 AramZS: I agree we need some sort of age controls, but I think the context in which we present them and how we setup the power dynamics are extremely important 06:14:39 Ben: +1, yes 06:14:44 ... was discussed at the workshop 06:14:45 q+ andrewcampling 06:14:46 q? 06:14:52 ack npdoty 06:14:54 npdoty, you wanted to comment on brainstorming possible work, not on stopping every proposed area of work 06:15:07 npdoty: Appreciate the passionate viewpoints! 06:15:41 bvandersloot has joined #age-restrictions 06:15:45 q? 06:15:46 ... I expect we need a spectrum of solutions, of which some of us will think they are not a good choice 06:16:04 ... Handling an imperfect situation is hard, I don't think we're looking for a single solution 06:16:07 q? 06:16:24 ack michaelficarra 06:16:47 manu_ has joined #age-restrictions 06:16:50 michaelficarra: A lot of the things we're talking about seem to be focused on is age above a certain range 06:17:01 ... But the opposite problem is actually interesting too, e.g. creating safe spaces for teenagers only 06:17:13 ... Difficulties with overage persons entering those spaces 06:17:18 ... Is this in scope? 06:17:25 q? 06:17:31 it might be a different problem, but it's a certainly a relevant/related problem 06:17:35 Ben: It was discussed at the workshop, hard problem 06:17:51 Ehsan has joined #age-restrictions 06:18:01 q? 06:18:12 ack timcappalli 06:18:12 ack timcappalli 06:18:12 tmaruha4 has joined #age-restrictions 06:18:20 The Advanced Persistent Teenager issue 06:18:23 present+ 06:18:24 timcappalli: This has potential to impact existing tech, like passkeys 06:18:29 q+ 06:18:32 ... People are using passkeys to do this now, which is really bad 06:18:38 ... Since you can share passkeys 06:18:43 q? 06:19:04 I saw that announced more widely on Monday, before that I thought it was just speculative 06:19:23 alexis_hancock: What I mostly see around risk of youth or minors is [??] risk 06:19:27 ... There won't be one technical solution 06:19:37 ... Age verification doesn't teach kids to be safe online 06:19:44 q+ 06:19:46 s/[??]/contact/ 06:19:52 bvandersloot has joined #age-restrictions 06:19:54 q+ to talk about "age over' and the importance of advocacy 06:19:56 q? 06:19:56 ... So we want to be able to find solutions that have unlinkability, etc 06:19:59 dveditz has joined #age-restrictions 06:20:07 ... To help decouple from data brokers 06:20:15 ... We see data brokers working with age verification systems to gather data 06:20:20 ... I want to see us break away from that 06:20:27 q+ on abuse reporting (not for content restriction but for other harms) 06:20:31 manu_ has joined #age-restrictions 06:20:40 ... We won't find a perfect solution, but we can find a collection of solutions that I think can help 06:20:44 q? 06:20:59 age verification only partitions people by age, it does nothing to create safe spaces (or to keep people out of unsafe spaces) 06:21:03 ... A lot of this is around social, and there's no technology that fully solves social 06:21:14 PaulZiv has joined #age-restrictions 06:21:16 tmaruha4 has joined #age-restrictions 06:21:21 ErikAnderson has joined #age-restrictions 06:21:37 ... We spent a lot of time debating perfect vs good, whether we should step away or not 06:21:44 q+ 06:21:56 ... We are still trying to fight age verification laws so people can still have anonymity 06:22:00 ... But its likely to be here a long time 06:22:06 q? 06:22:20 +1 - we should be very limited here in terms of what we provide - a specific signal of age range but not broad context and as little meaning to that signal as possible. 06:22:36 ...how can we combine solutions 06:22:49 q+ 06:22:51 ack andrewcampling 06:23:23 andrewcampling: +1 that the focus shouldn't just be age verifying kids to keep them off of adult sites, but also the inverse, as was said 06:23:58 pascoe has joined #age-restrictions 06:24:02 ... let's not ignore the harms also of NOT age verifying 06:24:09 ... there are harms of doing it, but also the opposite 06:24:16 q? 06:24:58 ErikAnderson has joined #age-restrictions 06:25:05 martin: Quick interjection, one thing that keeps coming up is question of outright illegal content 06:25:28 ... There is a limit to how much we can solve illegal content 06:25:49 andrewcampling: I think there is an overlap, where the pathway to creating the illegal content comes through legal channels to start with 06:25:54 q? 06:25:58 most of the age verification proposals are not focused on distribution of illegal abuse material -- those aren't suited to cooperative mechanisms of age-verification (because they aren't compliant, clearly) 06:26:14 ???: Major theme at workshop was that these mechanisms are not perfect 06:26:31 ... Think the regulations were not written with that in mind 06:26:37 s/???:/mnot: 06:26:38 s/???: Major theme/mnot: Major theme/ 06:26:55 ack rby 06:26:55 ... Being able to verify the outcomes to say that age verification does come with a reduction in harm is very valuable 06:27:18 rbyers: We definitely should have done the workshop 3 years ago, but I disagree that its too late now 06:27:51 ... My example is Digital Credentials - we've been challenged, its been hard, its not perfect, but we have to try and we're making progress 06:28:00 manu_ has joined #age-restrictions 06:28:07 q+ 06:28:19 ... Digital Credentials in Chrome is seeing an uptake in usage already, using ZPK for adult content sites in UK and other age-restricting geographies 06:28:31 ... Thats a standard in scope for W3C to influence, for this group to influence 06:28:38 ... If we can move and accept not perfect 06:28:45 q? 06:29:07 mnot: One thing that comes up is that its not clear if DC is the solution 06:29:19 PaulZiv has joined #age-restrictions 06:29:23 ack had 06:29:26 note that if you suggest improvements, you might also hear that it needs to be too urgently deployed and so we don't have time to make those improvements 06:29:26 q+ to ask if this work is really about age verification, or is it about ensuring protected spaces/communities online? 06:29:36 hadleybeeman: A lot of us in W3C have talked about how this tech won't work 06:29:40 ... How there's always a way around it 06:29:55 ... At the workshop, we talked about introducing concept of an acceptable failure level 06:29:59 ... Bringing that to the regulators 06:30:13 ... And trying to shift the conversation policy side to be probablistic 06:30:21 ... To me, that unlocked a way to do good without being perfect 06:30:29 q? 06:30:36 tmaruha40 has joined #age-restrictions 06:30:39 ack dezell 06:30:39 dezell, you wanted to talk about "age over' and the importance of advocacy 06:31:02 +1 to Manu. Especially with laws already on the books that do not delineate between adults and children’s. 06:31:04 dezell: We have a fairly successful age verification program 06:31:08 bvandersloot has joined #age-restrictions 06:31:09 ... Largely because we're laser focused on one specific case 06:31:12 q? 06:31:18 ... In our case, we follow government policy 06:31:46 ... That keeps you from doing things that will infringe on free speech rights, court cases, etc 06:31:56 ... Another thing. Privacy preserving works both ways 06:32:18 ... In my opinion, a bad actor's privacy is just as sacrosanct as others' 06:32:43 ... We keep records and they are verifiable, but don't want to pollute data lakes with how old you are 06:33:02 ... Finally, we focus on age-over. Just do that. Don't tell birthdates. Need to know basis. 06:33:17 sarahj has joined #age-restrictions 06:33:18 except different jurisdictions and cases need different age boundaries 06:33:18 ... We can make headway in this, but need to choose where the battle happens 06:33:28 ... We also need advocacy in the legislative process 06:33:35 ... You need to make a difference there too 06:33:36 q? 06:33:38 ack npdoty 06:33:38 npdoty, you wanted to comment on abuse reporting (not for content restriction but for other harms) 06:34:08 sid has joined #age-restrictions 06:34:11 npdoty: Workshop was focused on restriction of access to content, where the restriction was age based 06:34:12 PaulZiv has joined #age-restrictions 06:34:21 ... the potential harms to children definitely not scoped to just that (maybe not even aligned) 06:34:25 tmaruha4 has joined #age-restrictions 06:34:29 ... if we are going to look at the broader question of (child) safety online 06:34:35 ... might suggest other work that needs done 06:34:50 q+ 06:34:50 ... reporting abusive websites, mechanisms for identifying bad situations 06:35:12 close the queue 06:35:12 ... not an area where we've done a lot of standards work at w3c, but I think it is an important area 06:35:20 Zakim, close the queue 06:35:20 ok, smcgruer_[EST], the speaker queue is closed 06:35:42 ack syllaal 06:35:54 ty, smcgruer! 06:35:56 syllaal: It is not too late to make an impact (from perspective of someone working in Germany) 06:36:04 ... EU is focused on wallet for age assurance (18+) 06:36:08 ... But everything else is left open 06:36:18 ... Either technology agnostic, or very vague on what technology 06:36:31 ... And vague on being 'more or less sure' 06:36:32 jugglinmike has joined #age-restrictions 06:36:42 ... A lot of smaller companies really struggle to comply due to lack of guidance 06:36:56 ... So definitely not too late 06:37:11 ... Also, whatever system is developed is agnostic to the use case. 06:37:27 ... can always be used for use-cases other than the legally required 06:37:35 ... that is a dilemma we have to face 06:37:44 q? 06:37:54 laser-focus on use case and agnostic to use case is a tough contradiction of advice 06:38:01 ack Ara 06:38:11 but I do think use case limitation would be relevant and significant 06:38:12 AramZS: We should aim for as minimal as possible a signal, store as little as possible (preferably nothing) 06:38:24 ... We will also have to figure out signals around users aging out of restricted area 06:38:25 ... No clear path at the moment 06:38:30 sarahj has joined #age-restrictions 06:38:31 ack manu_ 06:38:40 ack manu 06:38:40 manu_, you wanted to ask if this work is really about age verification, or is it about ensuring protected spaces/communities online? 06:38:45 manu_: Is this really about age? Seems to be more about safe spaces for communities? 06:38:46 ... Age is a subset use-case 06:38:53 ... I'm concerned we're going to over-optimize on age 06:39:01 It is about age because that's the specific thing that is required of us by law 06:39:29 I think that's a good example, actually. communities self-police their boundaries, and we should enable that. 06:39:33 yasushi has joined #age-restrictions 06:39:39 q? 06:40:01 ????: There is a big difference between things you self-assert for, versus things you are not legally allowed to declare (such as what age I am) 06:40:08 ack mt_hates_irc 06:40:22 mt_hates_irc: Different people have different conceptions of what the requirements are in the space 06:40:37 ... That includes things like privacy, and there are difficult conversations there in this space 06:40:46 s/????/hadleybeeman 06:40:53 ... Things like record keeping questions is a difficult question 06:40:53 what authority attests to your membership of the LGBT+ community? Kind of an offensive question, but if people can self-declare then the mechanism will fail to meet the age-gating legal requirements 06:40:59 ... So focusing on the requirements is important 06:41:02 q? 06:41:14 Ben: Want to thank everyone for coming, the chairs of the workshop 06:41:30 ... I think there are a few clear steps to take, we didn't quite get there but great conversation anyway 06:41:48 ... DC is one area, meta tag in WhatNot ? group tomorrow 06:41:54 ... If anyone wants to talk about all this, fine me 06:41:56 s/fine/find 06:42:02 I didn't want to further raise this topic with the limited time but I very much worry we will fall into creating a digital Comstock stamp and I'm not sure we've got a clear line avoiding that 06:42:28 Zakim, make minutes 06:42:28 I don't understand 'make minutes', tara 06:42:35 RRSAGENT, make minutes 06:42:36 I have made the request to generate https://www.w3.org/2025/11/12-age-restrictions-minutes.html tara 06:42:43 bvandersloot, do you have any links to share, re meta tag proposals, or whatwg meetings? 06:43:49 RSSAgent, end this meeting 06:44:10 RRSAGENT, set logs public 06:44:35 RRSAgent, bye 06:44:35 I see no action items