Age Verification Is the Trojan Horse. Identity Control Is the Prize.

A post on Dyne.org cuts through the "protect the children" framing with a simple restatement of what age verification actually requires: turning the open internet into a permission system where every user must prove who they are before accessing content.

The technical argument is straightforward. There is no way to verify age without verifying identity. Any system robust enough to confirm a user is over 16 necessarily collects enough data to identify them. Binary age checks don't exist in practice — what exists are identity verification systems with an age field attached. As one HN commenter put it: "The end goal is verified user identification. They want every transaction on the internet to be associated with the exact identity of the user. No more anonymity."

Brazil just passed a law requiring age verification for every site categorized as 16+. The EU has been circling similar proposals. In the US, state-level age verification laws have already passed in Louisiana, Texas, and others, with most requiring government ID upload or third-party identity services. The pattern is global and accelerating.

The political mechanics are worth understanding. Religious and anti-porn advocacy groups discovered that framing their goals as anti-trafficking or child protection makes legislative opposition politically radioactive. Who votes against protecting children? This isn't conspiracy — it's documented strategy, and it works.

There's a genuinely uncomfortable tension here that deserves honest acknowledgment. Unrestricted internet access does expose kids to harmful content. Multiple commenters in the HN discussion — including those opposing these laws — freely admitted their own unsupervised childhood internet access caused real harm. The problem is real. The proposed solution just happens to require dismantling online anonymity as a side effect.

An emerging theory adds another dimension: as frontier AI models make bot traffic indistinguishable from human traffic, advertisers are questioning what they're paying for. Universal identity verification solves that problem too — proving ad impressions come from real, identifiable humans. Child protection provides the political cover; ad verification provides the economic incentive.

For developers, the implications are concrete. If these laws proliferate, every application serving user-generated content will need to integrate identity verification middleware. That means new compliance surfaces, new data liability, and new infrastructure costs that disproportionately burden smaller platforms while consolidating power with identity providers. The open web doesn't die in a dramatic battle — it dies one "reasonable" verification step at a time.

The post argues that protection should stay where it belongs: with families, schools, and device-level controls that don't require rebuilding the internet's access model. That's the right call. You can protect children without requiring every adult to show ID at the door.