1617

The Chrome team says they're not going to pursue Web Integrity but...

it is piloting a new Android WebView Media Integrity API that’s “narrowly scoped, and only targets WebViews embedded in apps.”

They say its because the team "heard your feedback." I'm sure that's true, and I can wildly speculate that all the current anti-trust attention was a factor too.

you are viewing a single comment's thread
view the rest of the comments
[-] schnurrito@discuss.tchncs.de 13 points 1 year ago

I have not followed this stuff very closely. Here's a question. This article says:

People took issue with how the Web Integrity API would bring DRM to the open web.

Has there not been DRM on the web for many years by now for videos?

[-] SeriousBug@infosec.pub 39 points 1 year ago

This is worse. Let's go with an example: on an Android phone, you visit a website. The website asks for an integrity check, the browser works with Google Play Services to complete the check.

What if you have a de-Googled phone without Play Services, or if you made modifications to restrict Google's tracking? Then Google can refuse to verify you. What if you installed an ad blocker in your browser? Google can refuse to verify you.

If you fail verification, the website could ask you to complete a captcha, or just refuse to show you anything.

[-] Bishma@discuss.tchncs.de 35 points 1 year ago

This would bring DRM to everything on the internet. If you wanted to get grandma's apple brown betty recipe even the text would be unavailable unless your browser and the page agree that it should happen. And the browser wouldn't give the OK unless the page is advertiser friendly, and the page won't give the greenlight if you've blocked any ads recently.

this post was submitted on 02 Nov 2023
1617 points (99.7% liked)

Technology

59590 readers
2813 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS