Apple already shipped attestation on the web, and we barely noticed

trashhalo@beehaw.org to Technology@beehaw.org – 272 points –
Apple already shipped attestation on the web, and we barely noticed
httptoolkit.com

Apple has deployed a system called Private Access Tokens that allows web servers to verify if a device is legitimate before granting access. This works by having the browser request a signed token from Apple proving the device is approved. While this currently has limited impact due to Safari's market share, there are concerns that attestation systems restrict competition, user control, and innovation by only approving certain devices and software. Attestation could lead to approved providers tightening rules over time, blocking modified operating systems and browsers. While proponents argue for holdbacks to limit blocking, business pressures may make that infeasible and Google's existing attestation does not do holdbacks. Fundamentally, attestation is seen as anti-competitive by potentially blocking competition between browsers and operating systems on the web.

90

You are viewing a single comment

If a website doesn't want me to see their shit, then I guess i won't see their shit. I already have some sites that don't work because of my aggressive use of lists on my pihole, in addition to the usual browser plugins. If a site doesn't work now, I just move on. I don't give a shit about any site enough to put up with this type of bullshit.

What if it's your bank's website? Or email provider? Or literally anything else you actually have to choose and can't pick? "It's okay because I don't think it affects me / I can ignore it" is always a bad reason to allow a bad thing happen.

We're not allowing it. We don't have a choice.

Well you can protest, inform others, switch browsers, make your family switch...

It's not easy and might not accomplish much but at least you're trying.

We won't be allowed to switch browsers any more. That's the whole problem.

32 more...

If a website doesn't want me to see their shit, then I guess i won't see their shit

That's how I react to Twitter and Facebook requiring login to even view most things.

Whatever you're showing isn't important enough to be worth me making an account.

To see how your approach works, try using the Internet with Javascript turned off for reading text. You will realize you can't organize your life nowadays without bowing to what websites do technically.

You can't use websites when you disable a major piece of functionality? Shocker

Why would Javascript be a major piece of functionality for a website that is based on text articles?

I had to stop using my car insurance app because it started requiring location information to open.

32 more...