zlacker

[return to "Google Chrome Proposal – Web Environment Integrity"]
1. predic+Cf[view] [source] 2023-07-18 22:36:42
>>screen+(OP)
Lots of people doom and gloom here about threats to user privacy and freedom.

This is the one I'd be worried about. Thought it was annoying to not be able to use banking apps on a rooted Android? Think about how annoying it will be when you can't do much of anything, even on the Web, unless it's from a sealed, signed Apple/Google/Microsoft image-based OS...

I realize the way Firefox's user share is going, it might not matter or they might feel they don't have a choice but I really, really hope Mozilla doesn't even remotely consider implementing this.

◧◩
2. wolpol+tl[view] [source] 2023-07-18 23:25:44
>>predic+Cf
Safari, rather than Firefox, might be only actor with the market share and motivation to drag out the implementation and adoption of this proposal.
◧◩◪
3. NoGrav+Zl5[view] [source] 2023-07-20 12:35:44
>>wolpol+tl
You're right about the market share; I'm not sure about the motivation. Apple has the capacity to be an attester in this system, since they are an OS and hardware vendor. And while they care some about privacy (in as much as it's a marketing point), they manifestly don't care about user freedom (on iOS, and increasingly on MacOS). I think as long as their code running in a secure enclave is an acceptable attester to this API (which it will be), they don't have any motivation to oppose it.
[go to top]