TheBirthmark Standard Foundation

Why Photo Authentication Keeps Failing (And What We're Learning Building an Alternative)

When Reuters had to pull AI-generated images from their wire service in 2024, they identified the fakes using Adobe’s Content Credentials. The system worked—in that controlled workflow, with preserved metadata, in a professional newsroom. But The Verge just published an interview with reporter Jess Weatherbed documenting why this approach fails everywhere else. Her conclusion after months covering C2PA adoption: “there is not going to be a point in the next three, five years where we sign on and go, ‘I can now tell what’s real and what’s not because of C2PA.’” The problem isn’t cryptography—it’s that the vast majority of authenticated images lose their metadata when shared on social media. Instagram, Facebook, Twitter all strip EXIF data during upload. C2PA credentials get destroyed along with everything else. OpenAI, which sits on C2PA’s steering committee, openly admits their implementation is “incredibly easy to strip.”

The Birthmark Standard White Paper: Published on arXiv

We’ve published the technical specification and security analysis for the Birthmark Standard on arXiv: https://arxiv.org/abs/2602.04933

The paper runs 32 pages and covers the complete architecture. How camera sensor fingerprints create hardware roots of trust. How the privacy model prevents surveillance while enabling authentication. How the consortium blockchain survives metadata stripping. There’s formal verification of privacy properties using ProVerif, attack-defense analysis, and performance projections. If you want the technical details, they’re all there.