zlacker

[return to "Web Environment Integrity API Proposal"]
1. freeon+Ia[view] [source] 2023-07-21 18:57:32
>>reacto+(OP)
Fork chromium and have it return true. Problem, websites?
◧◩
2. jabban+3c[view] [source] 2023-07-21 19:04:41
>>freeon+Ia
It's signed?

Sure you can fake the results of an attestation in your fork, but your fork would be using your own key to sign the response, a key that the site can reject.

◧◩◪
3. freeon+MC[view] [source] 2023-07-21 21:04:25
>>jabban+3c
Ah, we’ll also have to extract the key from chrome. It’s no worse than WideVine.
◧◩◪◨
4. jaunty+Ne1[view] [source] 2023-07-22 00:55:56
>>freeon+MC
I don't believe any of the HD widevine keys have been revealed.

I would practically guess the keys that did get revealed were deliberately leaked, low stake keys, that keep people still willing use to use widevine platforms at low res without being angry.

[go to top]