←back to thread

Apple already shipped attestation on the web, and we barely noticed

(httptoolkit.com)
596 points pimterry | 1 comments | 25 Jul 23 14:10 UTC | HN request time: 0.207s | source
Show context
arianvanp ◴[25 Jul 23 14:26 UTC] No.36862728[source]▶
I think this is less invasive though. The Google proposal runs before content loaded into the DOM. Which means it can be used to do things like programmatically detect and block code injection like ad blockers.

PATs are purely a server side thing. They don't give this kind of control. And don't perform a signature over the content

replies(2): >>36862880 #>>36862909 #
1. mike_hearn ◴[25 Jul 23 14:37 UTC] No.36862909[source]▶
How is it different? The server can just not send you content if you don't present a PAT.