1617

The Chrome team says they're not going to pursue Web Integrity but...

it is piloting a new Android WebView Media Integrity API that’s “narrowly scoped, and only targets WebViews embedded in apps.”

They say its because the team "heard your feedback." I'm sure that's true, and I can wildly speculate that all the current anti-trust attention was a factor too.

you are viewing a single comment's thread
view the rest of the comments
[-] SeriousBug@infosec.pub 39 points 1 year ago

This is worse. Let's go with an example: on an Android phone, you visit a website. The website asks for an integrity check, the browser works with Google Play Services to complete the check.

What if you have a de-Googled phone without Play Services, or if you made modifications to restrict Google's tracking? Then Google can refuse to verify you. What if you installed an ad blocker in your browser? Google can refuse to verify you.

If you fail verification, the website could ask you to complete a captcha, or just refuse to show you anything.

this post was submitted on 02 Nov 2023
1617 points (99.7% liked)

Technology

59590 readers
3030 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS