127
Apple already shipped attestation on the web, and we barely noticed
(httptoolkit.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 25 Jul 2023
127 points (95.7% liked)
Technology
59467 readers
3285 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
Which problems? As far as I can tell this solves zero problems for users of websites. Wanting to replace captchas with this is just another arms race that normal users will suffer from.
Well, captchas seem likely to become useless in the near future, and are currently a key feature used to prevent unwanted bot activity on many if not most websites. What can replace them?
Would this technology work better if there were a coalition of attesters that granted access to newer and smaller browsers and os makers?
The point of the attestation is to show that given browser won't do some things. If the browser is open source on open source operating system the user can modify it in any way he wants, so not such attestation can be given to such browser.
Even if we are ok with attested browser being official builds never modified by users, then user could still fake it if they have full control of their operating system. So the operating system must also be attested, so it cannot be freely modified. And what is a point of open source then? You can see, but you cannot touch?
Nothing. Nothing should replace them.
You, as a website, unconditionally have zero right to know anything about what a user is doing on their computer.
Block behavior, not devices.
How can the attester attest that a bot is not using a valid browser on a valid os?
It’s up to the attester to decide. Maybe it needs to run some verifications every so often. There’s nothing preventing it from refusing you attestation too, if your device is out of date, or is too old and won’t receive future updates