←back to thread

Apple already shipped attestation on the web, and we barely noticed

(httptoolkit.com)
596 points pimterry | 1 comments | 25 Jul 23 14:10 UTC | HN request time: 0.262s | source
Show context
Santosh83 ◴[25 Jul 23 14:28 UTC] No.36862751[source]▶
Maybe I'm wrong but Web Attestation will also be a death knell for Linux devices (not Android/Chrome OS) as far as being able to use them as equal clients to use the Web goes. They're simply too diverse and 'hackable' as a plotform for remote attestation to work reliably and thus they'll be excluded altogether (except a few 'blessed' distros that will then become industry controlled, and not Linux in spirit anymore).
replies(7): >>36862825 #>>36862993 #>>36863025 #>>36863063 #>>36863230 #>>36864206 #>>36865119 #
onion2k ◴[25 Jul 23 14:44 UTC] No.36863025[source]▶
I slightly suspect that the only platforms that will actually implement Web Attestation are the ones I'm trying to remove myself from, so I secretly[1] hope this is the catalyst I need to stop going on crappy social networks and video platforms.

I apparently don't have the will power to stop going on these sites so maybe stopping me loading content from the other side is exactly what I need.

[1] Not so secretly now I've mentioned it here I suppose.

replies(3): >>36863057 #>>36863066 #>>36864188 #
tomstockmail ◴[25 Jul 23 14:46 UTC] No.36863057[source]▶
Banks.
replies(2): >>36863207 #>>36863374 #
N19PEDL2 ◴[25 Jul 23 14:55 UTC] No.36863207[source]▶
There's a lot of competition in the banking sector, so I don't think banks can afford to start telling customers that they need specific devices to access their online services.
replies(7): >>36863318 #>>36863363 #>>36863432 #>>36863516 #>>36863650 #>>36871174 #>>36874938 #
1. bongobingo1 ◴[25 Jul 23 15:08 UTC] No.36863432[source]▶
https://en.wikipedia.org/wiki/Web_compatibility_issues_in_So...

https://web.archive.org/web/20230309020227/https://www.nytim...

https://www.theregister.com/2020/12/10/south_korea_activex_c... (2020)

> South Korea knew it had an ActiveX problem way back in 2015, because even then the need to use ActiveX to do business on local websites irked outsiders.

> For locals, the requirement to run the code was so annoying that getting rid of it became an election promise at the nation’s 2017 presidential election.

> That promise has now been delivered: the nation’s Ministry of Science and ICT today (2020) annnouced the service’s planned demise.

Banks might not, but the governments may come to a similar idea, and tell the banks to tell you.