←back to thread

Apple already shipped attestation on the web, and we barely noticed

(httptoolkit.com)
596 points pimterry | 3 comments | 25 Jul 23 14:10 UTC | HN request time: 0.689s | source
Show context
modeless ◴[25 Jul 23 16:30 UTC] No.36864935[source]▶
Yesterday, the sentiment on Google's early proposal was "company breakups start to make a lot of sense", "Go f yourself, Google", "It's maddening and saddening", "[the people involved] reputations are fully gone from this".

Today it turns out Apple not only proposed but implemented and shipped the actual feature last year. "It could be an interesting opportunity to reboot a few long-lost dreams". "I kind of get both sides here". "I guess I personally come down to leaving this turned on in Safari for now, and seeing what happens". Granted, the overall sentiment is still negative but the difference in tone is stark. The reality distortion field is alive and well, folks.

replies(15): >>36865193 #>>36865203 #>>36865695 #>>36865746 #>>36866087 #>>36866720 #>>36866827 #>>36867178 #>>36867841 #>>36867906 #>>36869247 #>>36869937 #>>36870632 #>>36871552 #>>36876486 #
acedTrex ◴[25 Jul 23 16:43 UTC] No.36865203[source]▶
They aren't implementing it as a common browser standard
replies(2): >>36865230 #>>36865499 #
1. kccqzy ◴[25 Jul 23 16:59 UTC] No.36865499[source]▶
PATs are a draft standard with participation by companies other than Apple (such as Fastly and Cloudflare and Google): https://www.ietf.org/archive/id/draft-private-access-tokens-...
replies(1): >>36866719 #
2. howinteresting ◴[25 Jul 23 18:05 UTC] No.36866719[source]▶
My impression is that Google abandoned this approach.
replies(1): >>36873237 #
3. kccqzy ◴[26 Jul 23 04:49 UTC] No.36873237[source]▶
My impression is that Google is, once again, just slow at execution. They probably do want to integrate PATs together with their Google One VPN product.