←back to thread

Apple already shipped attestation on the web, and we barely noticed

(httptoolkit.com)
596 points pimterry | 1 comments | 25 Jul 23 14:10 UTC | HN request time: 0.202s | source
Show context
gooob ◴[25 Jul 23 14:31 UTC] No.36862804[source]▶
what even is the reasoning they have for proposing and implementing this?
replies(3): >>36862852 #>>36862893 #>>36862910 #
ezfe ◴[25 Jul 23 14:37 UTC] No.36862910[source]▶
Allow Apple devices to browse the web with fewer captcha interruptions, etc. and be more trusted as non-bot devices.
replies(1): >>36863657 #
FabHK ◴[25 Jul 23 15:22 UTC] No.36863657[source]▶
> Allow Apple devices to browse the web with fewer captcha interruptions

In particular, while using a VPN or Tor. So in one sense it’s even a pro-privacy move, insofar as it allows to distinguish a human user on a legit device using a VPN from a bot using a VPN (upon which the server can present a captcha or denial to the latter, but not the former, making it less onerous for average users to use a VPN).

replies(2): >>36864231 #>>36864276 #
concinds ◴[25 Jul 23 15:55 UTC] No.36864231[source]▶
I hate how websites hinder VPN users. Google Search often shows me captchas on Mullvad, and sometimes blocks my request entirely (no captcha). Screw them.

I don't see the issue here at all. Apple added this because otherwise the web would be completely broken in iCloud Private Relay due to the constant catchas and hardwalls. Google wants to add it to kill adblockers entirely. It's not even the same ballpark.

replies(1): >>36865020 #
1. howinteresting ◴[25 Jul 23 16:33 UTC] No.36865020[source]▶
It is bad because it is yet another way people exercising their freedom have a worse experience than people who accept the warm embrace of daddy Apple.

The fact that a device is locked down should confer zero benefits on the open web as a matter of uncompromising principle.