Secretary
Federal Trade Commission
Room H-159
600 Pennsylvania Avenue, N. W.
Washington, D.C. 20580

Dear Secretary:

I submit the following comments in response to the Commission's Notice of Proposed Rulemaking to Implement the Children's Online Privacy Protection Act of 1998. These remarks respond to the Question posed by the Commission, soliciting comments on provisions in the proposed Children's Online Privacy Protection Rule (the "Rule"). This comment is to replace our earlier comment.

We support FTC rules to protect children privacy. High cost of compliance (cost per parent verification) is often mentioned as the main hindrance for companies to obtain parental consent. Our company would like to offer this service free to Internet users and companies with high children traffic. More detail follows:

• Our analyses indicate that the best approach to Parental Consent verification is credit card based. Our company, eOneID.com is almost ready to launch Parental Consent verification web based service compliant with the Rule and based on credit card verification. This service will be free to Internet users and companies with high children traffic. It is also non-obtrusive from our customers' web sites (companies with high children traffic) and parents perspective. Also, parents do not have to verify that they are the parents at every site that requires parental consent when our system is used. Parents do not have to install any client software either.

• We also soon may launch similar service for parents who do not have an access to the Internet as well.

Representatives of Companies with high children traffic please feel free to contact me for further information about our service.

Analysis of merits of other methods of Parental Consent obtainment and verification mentioned in the Rule:

1. "(1) a consent form to be signed by the parent and returned to the operator by postal mail or facsimile"

This option is inadequate because children themselves can sign for parents and submit it to the operator. How operator will now if the signature is authentic?

2. "(3) a toll-free telephone number that parents could call" - This presumes that operators will have phone staff which can distinguish parents voices from children or their elder siblings. This is often hard to do, say, between mothers and daughters. And there is no track record or technology involved it is just a human judgment call which is subject to errors.

3. "(4) an e-mail accompanied by a valid digital signature. ":

This option is inadequate as well. Here is why:

Anybody including kids can go to, say, Verisign and get free trial digital certificate many times over. If you look in their logs you can see many Bill Clinton's digital certificates, for example, were issued to people who are obviously not him. In, essence as the rule reads there is very little and insignificant difference between a simple email verification and "4) an e-mail accompanied by a valid digital signature." Nowadays anybody can get a valid digital signature by getting a free trial digital certificate in anybody's name even by simply installing Internet Explorer 5! Also many email clients in wide use (like AOL) do not support digitally signing e-mail.

From this analysis it can be seen that the only reasonable way to obtain Parental Consent is to use credit card based verification.

Thanks.