[cap-talk] Can webkeys solve the MySpace problem?

[Dean Tribble]

> >What problem is this solving? What security properties does the age
> >verification provide? Is there an authorization implied by being of a
> >certain age?
>
> People who run chat rooms want to keep nasty old men from talking to
> children.  If you the know the "true age" of all the people, you can
> build a system that only allows nasty young children to talk to
> other children.

Or adults with children, or adults who manage children (teachers,
scout leaders, priests), or anyone who participates in handing out web
keys, or anyone that knows a child and buys their webkey or or or.
This is one of those cases in which providing people what they are
asking for will leave you less secure, because the security theater
will distract from solving the real problem (which is really darn
hard, to be sure).