We’ll be out in force at @fosdem '26 at the end of this week, with eight talks on a wide variety of topics—the latest on @servo, GStreamer work, graphics stacks, MathML interop, WebAssembly runtimes, handing out Servo stickers, and more! #FOSDEM2026 igalia.com/2026/01/26/Igalia-a…
Igalia at FOSDEM ’26 | Igalia
Igalia is an open source consultancy specialised in the development of innovative projects and solutions.Igalia
This entry was edited (22 hours ago)
Fonant
in reply to Charlie Stross • • •It's impossible to restrict access to VPNs.
They could perhaps persuade some of the big providers to add access controls, but that would only result in more people using smaller or even self-hosted VPN services.
You can't un-invent encryption algorithms.
David Chisnall (*Now with 50% more sarcasm!*)
in reply to Fonant • • •Self-hosted VPNs already have age verification. I know 100% of the people who use my own WireGuard tunnel (i.e. me) and all of them are over 18.
The same is true of corporate VPNs: credentials are given only to employees and they are over 18 for various existing legal reasons.
Fonant
in reply to David Chisnall (*Now with 50% more sarcasm!*) • • •But it's almost impossible for a government to detect a VPN service that doesn't have age restrictions. Unless it's one of the big well-known ones.
A foreign entity could set them up, or someone aged less than 16 for themselves (and perhaps also their mates).
You need:
1. A cheap server, anywhere in the world, connected to the internet.
2. VPN server software, available for free from lots of places.
3. Some instructions, easily available.
Charlie Stross
in reply to Fonant • • •David Chisnall (*Now with 50% more sarcasm!*)
in reply to Charlie Stross • • •Unless I misunderstood the proposed law, it's the VPN operator that would be prosecuted in this case. They may lose their ability to take money from people in the UK.
If I'm over 18, it is not illegal for me to use the VPN, so someone would have to prove that I am using it but no one checked that I was over 18. If I am under 18, then the provider is at more legal risk but they could claim that they did age verification and this user managed to bypass it somehow.
The simplest way of doing age verification is to require a payment from a credit card in your name. The easiest way of bypassing this is to use a parent's credit card. If a company takes payment for VPN use via credit card, and makes a minimal effort to not accept debit cards or pre-paid cards for folks in the UK, they're probably okay.
Which doesn't mean that this is in any way a sensible law.
Fonant
in reply to David Chisnall (*Now with 50% more sarcasm!*) • • •The government has to discover that there is an illegal VPN being used in the first place.
It is quite possible for millions of VPNs to be made available to UK children, hosted all over the world. Perhaps hosted by children, sharing the small monthly server costs. Quite secret, extremely difficult to find.
The proposed law could only ever hope to apply to a few big VPN companies. Which just moves the VPN usage by children underground, where other dangers lurk.
HighlandLawyer
in reply to Fonant • • •History has proven both are always true until they aren't.