←back to thread

596 points pimterry | 1 comments | | HN request time: 0.304s | source
Show context
toyg ◴[] No.36863175[source]
This might be where the internet really gets forked, as it's been predicted over and over since the '90s.

On one side, we'll have a "clean", authority-sanctioned "corpweb", where everyone is ID'ed to the wazoo; on the other, a more casual "greynet" galaxy of porn and decentralized communities will likely emerge, once all tinkerers get pushed out of corpnet. It could be an interesting opportunity to reboot a few long-lost dreams.

replies(16): >>36863389 #>>36863444 #>>36863448 #>>36863559 #>>36863564 #>>36863569 #>>36863656 #>>36863710 #>>36863719 #>>36863948 #>>36864147 #>>36865104 #>>36865427 #>>36865627 #>>36866079 #>>36871323 #
TheNewsIsHere ◴[] No.36863656[source]
The problem I have with this web attestation concept generally is that I really want it _inside_ my shiny SSO-everywhere-Zero-Trust-at-the-edge-mTLS-everywhere business network.

I also kind of want it in the public-cloud-meets-private-use home environment (that is, my Cloudflare Access tunnels and MS365 business tenant I use for private stuff).

I don’t want it to touch my personal browsing experience or in any way involved in my personal-use browser environments.

These are effectively opposed desires at this point, and it’s a cat-out-of-the-bag technology.

replies(3): >>36863783 #>>36865952 #>>36873614 #
1. hakfoo ◴[] No.36873614[source]
This is a "have your cake and eat it" problem.

You can make devices around being unbreachable and self-attesting. Go build a SBC and sink in a block of epoxy.

But they also want the appeal of the open, hackable world-- cheap kit that's advancing quickly, commodity technology and infrastructure.

I am actually sort of disappointed we never ended up with a world of special-purpose sealed devices-- put a proper payment terminal on everyone's desk instead of trusting nobody slapped a keylogger into your browser while you're typing card numbers, for example.