zlacker

[return to "Apple already shipped attestation on the web, and we barely noticed"]
1. arianv+M3[view] [source] 2023-07-25 14:26:41
>>pimter+(OP)
I think this is less invasive though. The Google proposal runs before content loaded into the DOM. Which means it can be used to do things like programmatically detect and block code injection like ad blockers.

PATs are purely a server side thing. They don't give this kind of control. And don't perform a signature over the content

◧◩
2. mike_h+H6[view] [source] 2023-07-25 14:37:33
>>arianv+M3
How is it different? The server can just not send you content if you don't present a PAT.
[go to top]