←back to thread

Apple already shipped attestation on the web, and we barely noticed

(httptoolkit.com)
596 points pimterry | 3 comments | 25 Jul 23 14:10 UTC | HN request time: 0.416s | source
Show context
Santosh83 ◴[25 Jul 23 14:28 UTC] No.36862751[source]▶
Maybe I'm wrong but Web Attestation will also be a death knell for Linux devices (not Android/Chrome OS) as far as being able to use them as equal clients to use the Web goes. They're simply too diverse and 'hackable' as a plotform for remote attestation to work reliably and thus they'll be excluded altogether (except a few 'blessed' distros that will then become industry controlled, and not Linux in spirit anymore).
replies(7): >>36862825 #>>36862993 #>>36863025 #>>36863063 #>>36863230 #>>36864206 #>>36865119 #
shuckles ◴[25 Jul 23 14:47 UTC] No.36863063[source]▶
So far, Private Access Tokens are not widely adopted so you can get a feel for the potential Linux experience by browsing the web with iCloud Private Relay enabled. This flags almost every website's anti-spam classifiers, and you end up having to do 3-5 captchas to access anything protected by one. Wikipedia also blocks you from editing: https://meta.wikimedia.org/wiki/Talk:Apple_iCloud_Private_Re....
replies(4): >>36863139 #>>36863163 #>>36863224 #>>36863242 #
1. flangola7 ◴[25 Jul 23 14:53 UTC] No.36863163[source]▶
How is this different from using Tor or an anonymization VPN?
replies(2): >>36863216 #>>36866260 #
2. shuckles ◴[25 Jul 23 14:56 UTC] No.36863216[source]▶
IME, browsing the web with iCloud Private Relay is much better than Tor, since your client is not outright blocked by websites. I have not browsed the web much behind a VPN, so I can't compare the experiences.
3. lost_tourist ◴[25 Jul 23 17:41 UTC] No.36866260[source]▶
VPN works for almost any internet service and not just web browsing

VPN can be bought outside of a 5 eyes company

Tor is much better at making it easier to hide your browser footprint and thus anonymity browsing across sites as long as you reconnect often and don't change default settings.