I’ve written a long-form analysis on how age-verification laws are pushing identity into internet infrastructure (OS layers, app stores, identity credentials), rather than staying at the application/content layer. It looks at how enforcement is moving “down the stack”, with governments increasingly targeting platform chokepoints like Apple/Google and device-level controls. The piece draws on UK identity history, US telecoms, and current global regulation. Curious how people here think this holds up technically, especially around enforcement, bypass (VPNs, forks, sideloading), and where this creates new attack surfaces. submitted by /u/wayne_horkan [link] [comments]