And since you won't be able to modify web pages, it will also mean the end of customization, either for looks (ie. DarkReader, Stylus), conveniance (ie. Tampermonkey) or accessibility.

The community feedback is... interesting to say the least.

you are viewing a single comment's thread
view the rest of the comments
[–] 9 points 3 years ago (6 children)

Wouldn't spoofing work? Like, if the browser just sends "yes, no extensions, adblock, blah blah" then how would the attestation server know if that's true? Or does it require signed binaries, or some special hardware?

  • source
  • parent
  • hideshow 6 child comments
  • [–] 14 points 3 years ago

    That is conveniently left out of the speck. Attestation server may require signed binary on a client system, it may require whatever it wants really, because why not? It's a website who decides to trust attestation server or not.

  • source
  • parent
  • [–] 7 points 3 years ago (4 children)

    Depends on if they used cryptographic signatures. Those would be impossible to spoof because any change in the client would change the hash completely.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 16 points 3 years ago (3 children)

    Google silently shipping signed chrome executables soon...

    And then people wonder why non chromium browsers are important

  • source
  • parent
  • hideshow 3 child comments
  • [–] 8 points 3 years ago (2 children)