←back to thread

Apple already shipped attestation on the web, and we barely noticed

(httptoolkit.com)
596 points pimterry | 1 comments | 25 Jul 23 14:10 UTC | HN request time: 0.292s | source
Show context
disposition2 ◴[25 Jul 23 14:23 UTC] No.36862681[source]▶
It looks like this can be disabled (on iOS)[1]:

- Go to Settings

- Select your user account at the top

- Go to 'Password & Security'

- Scroll down to Advanced and disable 'Automatic Verification'

1. https://blog.cloudflare.com/how-to-enable-private-access-tok...

replies(2): >>36862882 #>>36867033 #
1. progbits ◴[25 Jul 23 18:24 UTC] No.36867033[source]▶
The ability to disable this is entirely irrelevant. If Chrome ships WEI the various Chromium forks will also let you disable it, even if Chrome doesn't. Or you can use Firefox.

The problem is when your bank, tax office or favorite streaming service starts requiring this to let you use their services. The problem is the ability for large fraction of casual users to have this at all.