Fwd: [security-lunch] Apr 29 | Eric Rescorla on "Understanding Age Assurance and Age Assurance Mandates"

[Alan Karp]

--------------
Alan Karp

---------- Forwarded message ---------
From: Michael Leo Paper via security-lunch <securit...@lists.stanford.edu>
Date: Mon, Apr 27, 2026 at 11:11 AM
Subject: [security-lunch] Apr 29 | Eric Rescorla on "Understanding Age Assurance and Age Assurance Mandates"
To: securit...@lists.stanford.edu <securit...@lists.stanford.edu>

Security Lunch 🌱 Ed. — Wednesday,  Apr 29th, 2026, 12:00 pm @ CoDa E160

Understanding Age Assurance and Age Assurance Mandates

Eric Rescorla

Can't make it in person? Join us on zoom.

See our past & upcoming events on our website! 

Abstract: 

Jurisdictions across the world have started to require websites, services, and even devices to perform age assurance for their users, with the intent of excluding users outside of certain age ranges. Current age assurance technologies are highly imperfect and present challenges in terms of accuracy, availability, circumvention resistance, and privacy.  Moreover, many age assurance mandates are written in ways that impose large burdens on vendors, platforms, and users, and may not even achieve their own stated goals. We examine the capabilities and limitations of the most common age assurance technologies and architectures, as well as some of the ways in which age assurance mandates can go awry.

This talk is based in part on joint work with Alissa Cooper and Zander Arnao:

https://kgi.georgetown.edu/wp-content/uploads/2026/01/Age_Assurance_Online_Technical-Assessment_Report_KGI.pdf

Bio:

Eric Rescorla is a Palo Alto based technologist with a focus on privacy and security for Internet communications. Eric has contributed extensively to many of the core security protocols used in the Internet, including TLS, DTLS, WebRTC, ACME, and QUIC. He is the former Chief Technology Officer, Firefox, at Mozilla and recently served as Chief Technologist for the Center for Forecasting and Outbreak Analytics at the Centers for Disease Control and Prevention.

_______________________________________________
security-lunch mailing list
securit...@lists.stanford.edu
https://mailman.stanford.edu/mailman/listinfo/security-lunch

[Mark S. Miller]

I hope they talk about the obvious hidden agendas. For those pushing this, the loss of privacy is a feature, not a bug.

--
You received this message because you are subscribed to the Google Groups "friam" group.
To unsubscribe from this group and stop receiving emails from it, send an email to friam+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/friam/CANpA1Z1%2BQKK1pfOVdyNuPQKGY_3rmuDHFEFzSwy%2BUQCpKkV3rg%40mail.gmail.com.

--

  Cheers,
  --MarkM