zlacker

>>dagurp+(OP)
Would this end up breaking curl, or any other tool that accesses https?

>>bloope+WH1
Yes it will

>>fooyc+nJ1
How?

>>pdanpd+bU1
The whole point of WEI is that the site can choose to block any combination of browser and OS they see fit, in a reliable way (currently, browsers can freely lie). CURL and friends will almost immediately be branded as bots and banned - that's the stated objective.

>>toyg+JW1
How?

The page must first load, then it requests an attestation using js and sends it back to the server for further use (like a recaptcha token).

So for something like curl it could be no change.

https://github.com/RupertBenWiser/Web-Environment-Integrity/...