zlacker

Apple would be in the position to fight this.

>>lagran+(OP)
"Apple already shipped attestation on the web, and we barely noticed"

>>36862494

>>luuurk+J
D'oh!

>>lagran+(OP)
All of the major tech companies are in on this. Google and Apple already deployed it for their phone and desktop platforms (iOS, Android, macOS, ChromeOS, all support attestation already). Microsoft is getting there with Windows 11, and all new devices shipping since ~2015 have the hardware support. Google is now closing the gap on desktop browsers.

Soon the percentage of people supporting it will be high enough to make it mandatory - the last 5% can just get a new device or something like that. They'll do it when their bank website tells them so.

The day Cloudflare flips the switch to require it for all connections is the day the open web dies.

>>lagran+(OP)
apple is one of the bad guys before the bad guys know they're bad guys..they already implemented this stuff

>>anders+G1
Thanks for the info, i wasn't aware of that at all.

> They'll do it when their bank website tells them so.

Right.

> The day Cloudflare flips the switch to require it for all connections is the day the open web dies.

Makes sense and unfortunately seems realistic.

>>lagran+B5
Here's an example how far along we already are. You can imagine the next steps, right? https://blog.cloudflare.com/eliminating-captchas-on-iphones-...

>>luuurk+J
And somehow this barely registers on HN, there have been over thousand comments on WEI this week, this was mentioned maybe in 5 (few of them mine - yes I'm repeating this point because it is important).

Attestation bad. Chrome is just catching up to what Safari is already doing, with in fairness more open standard.

We need to kill both.