←back to thread

Unpacking Google’s Web Environment Integrity specification

(vivaldi.com)
756 points dagurp | 1 comments | 26 Jul 23 11:30 UTC | HN request time: 0.001s | source
Show context
butz ◴[26 Jul 23 18:06 UTC] No.36882186[source]▶
How about adding a fair rule to standard, that attester cannot attest their own products? I wonder how long would it take for Microsoft or Apple to attest google.com as trustworthy website?
replies(1): >>36882433 #
1. pptr ◴[26 Jul 23 18:21 UTC] No.36882433[source]▶
The attestation is about the device, not the website.

I think just from a security perspective it makes most sense for the device or os manufacturer to handle attestation for that device.