i still think this should be solved at the protocol level. if you want to access the adult stuff, you have to staple a non-identifying zk-proof-of-age to your http/spdy/etc requests, otherwise it all just operates as usual.
Or even better, just a “User is a child” header.
Or even better, just a “User is a child” header.