▲ 973 ▼ Google's New Web Environment Integrity Proposal Dismissed by Brave, Mozilla, and Vivaldi (news.itsfoss.com) submitted 3 years ago by nils@feddit.de to c/technology@beehaw.org 106 comments fedilink hide all child comments
[–] narc0tic_bird@lemm.ee 117 points 3 years ago (1 child) Will have to wait and see how Apple reacts with Safari. Mozilla dismissing the proposal is big, but Apple has the second largest mobile OS marketshare with iOS, and so Safari is very relevant for websites to support it. permalink fedilink source hideshow 2 child comments replies: [–] Toribor@corndog.social 29 points 3 years ago (3 children) Doesn't Safari already have their own version of this? permalink fedilink source parent hideshow 6 child comments replies: [–] ultratiem@lemmy.ca 48 points 3 years ago* (last edited 3 years ago) (4 children) Lmao, no. Google is out of their minds. Apple has zero interest in controlling browsers or ads. https://money.cnn.com/2017/08/31/technology/business/apple-net-neutrality/index.html permalink fedilink source parent hideshow 8 child comments replies: [–] 01189998819991197253@infosec.pub 100 points 3 years ago From the article: "We work hard to build great products, and what consumers do with those tools is up to them — not Apple, and not broadband providers," Cynthia Hogan, VP of public policy at Apple Prove it, then. Unlock the bootloader. Allow us to install our own apps. Let us install our own OS on the hardware. I get they don't want to open source their iOS, that's fine. They say "what consumers do with those tools is up to them", but then they lock those tools down TIGHT. Actions speak much louder than words. They say those tools are ours? They need to show us that this is true. permalink fedilink source parent [–] shrugal@lemm.ee 45 points 3 years ago I'm sorry to disappoint you, but this is basically the same thing: https://blog.cloudflare.com/eliminating-captchas-on-iphones-and-macs-using-new-standard/ permalink fedilink source parent [–] sik0fewl@kbin.social 33 points 3 years ago (1 child) Then what's this? https://httptoolkit.com/blog/apple-private-access-tokens-attestation/ permalink fedilink source parent hideshow 2 child comments replies: [–] ultratiem@lemmy.ca 9 points 3 years ago (4 children) A part of Apple’s long term, multi-stage deployment to phase out passwords entirely. They announced it last year during WWDC and said it will be messy and not without hurdles, but they’re committed to having strong cryptography without need for password at all. Related: https://www.wired.com/story/apple-passkeys-password-iphone-mac-ios16-ventura/ A far cry from what Google is trying to do or their long term plans (we all know Google is trying to siphon more ad revenue). Google’s proposition is as bad for Apple as it is for the rest of us. permalink fedilink source parent hideshow 8 child comments replies: [–] that_one_guy@beehaw.org 27 points 3 years ago (1 child) Honest to god doublethink right here. permalink fedilink source parent hideshow 2 child comments replies: [–] sin_free_for_00_days@sopuli.xyz 2 points 3 years ago It's crazy when I see it. And I see it far too often these days. permalink fedilink source parent [–] aberrate_junior_beatnik@midwest.social 13 points 3 years ago Passkeys (which are broader than just Apple) and this are not related at all. Regardless, Apple absolutely has interest in controlling browsers. Hell, they already do it on iOS, where you can't use any rendering engine other than theirs. The only reason they might be against this is because they feel they can't control it the way they want. permalink fedilink source parent [–] RandoCalrandian@kbin.social 2 points 3 years ago Curious how this push comes after fairly set standards that passwords can't be compelled permalink fedilink source parent [–] dan@upvote.au 1 point 3 years ago* I don't think it's related at all. You can implement passwordless technologies like FIDO2 and Webauthn without browser attestation. A far cry from what Google is trying to do or their long term plans It's literally very similar technology though, and none of us know Apple's long-term plans for it. It's well-known in the digital ad industry that Apple are trying to increase the size of their ad network. Locking down tracking (app tracking transparency) is also advantageous to them as it only applies to third parties - Apple can still track users. permalink fedilink source parent [–] Karlos_Cantana@sopuli.xyz 10 points 3 years ago https://httptoolkit.com/blog/apple-private-access-tokens-attestation/ permalink fedilink source parent [–] thatsnothowyoudoit@lemmy.ca 8 points 3 years ago* (1 child) They do indeed: https://httptoolkit.com/blog/apple-private-access-tokens-attestation/ From the article: The focus here is primarily on removing captchas, and as such it's been integrated into Cloudflare (discussed here) and Fastly (here) as a mechanism for recognizing 'real' clients without needing other captcha mechanisms. Fundamentally though, it's exactly the same concept: a way that web servers can demand your device prove it is a sufficiently 'legitimate' device before browsing the web. permalink fedilink source parent hideshow 2 child comments replies: [–] takeda@beehaw.org 4 points 3 years ago So basically boiling frog slowly. permalink fedilink source parent [–] darkkite@lemmy.ml 2 points 3 years ago not to my knowledge permalink fedilink source parent
[–] Toribor@corndog.social 29 points 3 years ago (3 children) Doesn't Safari already have their own version of this? permalink fedilink source parent hideshow 6 child comments replies: [–] ultratiem@lemmy.ca 48 points 3 years ago* (last edited 3 years ago) (4 children) Lmao, no. Google is out of their minds. Apple has zero interest in controlling browsers or ads. https://money.cnn.com/2017/08/31/technology/business/apple-net-neutrality/index.html permalink fedilink source parent hideshow 8 child comments replies: [–] 01189998819991197253@infosec.pub 100 points 3 years ago From the article: "We work hard to build great products, and what consumers do with those tools is up to them — not Apple, and not broadband providers," Cynthia Hogan, VP of public policy at Apple Prove it, then. Unlock the bootloader. Allow us to install our own apps. Let us install our own OS on the hardware. I get they don't want to open source their iOS, that's fine. They say "what consumers do with those tools is up to them", but then they lock those tools down TIGHT. Actions speak much louder than words. They say those tools are ours? They need to show us that this is true. permalink fedilink source parent [–] shrugal@lemm.ee 45 points 3 years ago I'm sorry to disappoint you, but this is basically the same thing: https://blog.cloudflare.com/eliminating-captchas-on-iphones-and-macs-using-new-standard/ permalink fedilink source parent [–] sik0fewl@kbin.social 33 points 3 years ago (1 child) Then what's this? https://httptoolkit.com/blog/apple-private-access-tokens-attestation/ permalink fedilink source parent hideshow 2 child comments replies: [–] ultratiem@lemmy.ca 9 points 3 years ago (4 children) A part of Apple’s long term, multi-stage deployment to phase out passwords entirely. They announced it last year during WWDC and said it will be messy and not without hurdles, but they’re committed to having strong cryptography without need for password at all. Related: https://www.wired.com/story/apple-passkeys-password-iphone-mac-ios16-ventura/ A far cry from what Google is trying to do or their long term plans (we all know Google is trying to siphon more ad revenue). Google’s proposition is as bad for Apple as it is for the rest of us. permalink fedilink source parent hideshow 8 child comments replies: [–] that_one_guy@beehaw.org 27 points 3 years ago (1 child) Honest to god doublethink right here. permalink fedilink source parent hideshow 2 child comments replies: [–] sin_free_for_00_days@sopuli.xyz 2 points 3 years ago It's crazy when I see it. And I see it far too often these days. permalink fedilink source parent [–] aberrate_junior_beatnik@midwest.social 13 points 3 years ago Passkeys (which are broader than just Apple) and this are not related at all. Regardless, Apple absolutely has interest in controlling browsers. Hell, they already do it on iOS, where you can't use any rendering engine other than theirs. The only reason they might be against this is because they feel they can't control it the way they want. permalink fedilink source parent [–] RandoCalrandian@kbin.social 2 points 3 years ago Curious how this push comes after fairly set standards that passwords can't be compelled permalink fedilink source parent [–] dan@upvote.au 1 point 3 years ago* I don't think it's related at all. You can implement passwordless technologies like FIDO2 and Webauthn without browser attestation. A far cry from what Google is trying to do or their long term plans It's literally very similar technology though, and none of us know Apple's long-term plans for it. It's well-known in the digital ad industry that Apple are trying to increase the size of their ad network. Locking down tracking (app tracking transparency) is also advantageous to them as it only applies to third parties - Apple can still track users. permalink fedilink source parent [–] Karlos_Cantana@sopuli.xyz 10 points 3 years ago https://httptoolkit.com/blog/apple-private-access-tokens-attestation/ permalink fedilink source parent [–] thatsnothowyoudoit@lemmy.ca 8 points 3 years ago* (1 child) They do indeed: https://httptoolkit.com/blog/apple-private-access-tokens-attestation/ From the article: The focus here is primarily on removing captchas, and as such it's been integrated into Cloudflare (discussed here) and Fastly (here) as a mechanism for recognizing 'real' clients without needing other captcha mechanisms. Fundamentally though, it's exactly the same concept: a way that web servers can demand your device prove it is a sufficiently 'legitimate' device before browsing the web. permalink fedilink source parent hideshow 2 child comments replies: [–] takeda@beehaw.org 4 points 3 years ago So basically boiling frog slowly. permalink fedilink source parent [–] darkkite@lemmy.ml 2 points 3 years ago not to my knowledge permalink fedilink source parent
[–] ultratiem@lemmy.ca 48 points 3 years ago* (last edited 3 years ago) (4 children) Lmao, no. Google is out of their minds. Apple has zero interest in controlling browsers or ads. https://money.cnn.com/2017/08/31/technology/business/apple-net-neutrality/index.html permalink fedilink source parent hideshow 8 child comments replies: [–] 01189998819991197253@infosec.pub 100 points 3 years ago From the article: "We work hard to build great products, and what consumers do with those tools is up to them — not Apple, and not broadband providers," Cynthia Hogan, VP of public policy at Apple Prove it, then. Unlock the bootloader. Allow us to install our own apps. Let us install our own OS on the hardware. I get they don't want to open source their iOS, that's fine. They say "what consumers do with those tools is up to them", but then they lock those tools down TIGHT. Actions speak much louder than words. They say those tools are ours? They need to show us that this is true. permalink fedilink source parent [–] shrugal@lemm.ee 45 points 3 years ago I'm sorry to disappoint you, but this is basically the same thing: https://blog.cloudflare.com/eliminating-captchas-on-iphones-and-macs-using-new-standard/ permalink fedilink source parent [–] sik0fewl@kbin.social 33 points 3 years ago (1 child) Then what's this? https://httptoolkit.com/blog/apple-private-access-tokens-attestation/ permalink fedilink source parent hideshow 2 child comments replies: [–] ultratiem@lemmy.ca 9 points 3 years ago (4 children) A part of Apple’s long term, multi-stage deployment to phase out passwords entirely. They announced it last year during WWDC and said it will be messy and not without hurdles, but they’re committed to having strong cryptography without need for password at all. Related: https://www.wired.com/story/apple-passkeys-password-iphone-mac-ios16-ventura/ A far cry from what Google is trying to do or their long term plans (we all know Google is trying to siphon more ad revenue). Google’s proposition is as bad for Apple as it is for the rest of us. permalink fedilink source parent hideshow 8 child comments replies: [–] that_one_guy@beehaw.org 27 points 3 years ago (1 child) Honest to god doublethink right here. permalink fedilink source parent hideshow 2 child comments replies: [–] sin_free_for_00_days@sopuli.xyz 2 points 3 years ago It's crazy when I see it. And I see it far too often these days. permalink fedilink source parent [–] aberrate_junior_beatnik@midwest.social 13 points 3 years ago Passkeys (which are broader than just Apple) and this are not related at all. Regardless, Apple absolutely has interest in controlling browsers. Hell, they already do it on iOS, where you can't use any rendering engine other than theirs. The only reason they might be against this is because they feel they can't control it the way they want. permalink fedilink source parent [–] RandoCalrandian@kbin.social 2 points 3 years ago Curious how this push comes after fairly set standards that passwords can't be compelled permalink fedilink source parent [–] dan@upvote.au 1 point 3 years ago* I don't think it's related at all. You can implement passwordless technologies like FIDO2 and Webauthn without browser attestation. A far cry from what Google is trying to do or their long term plans It's literally very similar technology though, and none of us know Apple's long-term plans for it. It's well-known in the digital ad industry that Apple are trying to increase the size of their ad network. Locking down tracking (app tracking transparency) is also advantageous to them as it only applies to third parties - Apple can still track users. permalink fedilink source parent [–] Karlos_Cantana@sopuli.xyz 10 points 3 years ago https://httptoolkit.com/blog/apple-private-access-tokens-attestation/ permalink fedilink source parent
[–] 01189998819991197253@infosec.pub 100 points 3 years ago From the article: "We work hard to build great products, and what consumers do with those tools is up to them — not Apple, and not broadband providers," Cynthia Hogan, VP of public policy at Apple Prove it, then. Unlock the bootloader. Allow us to install our own apps. Let us install our own OS on the hardware. I get they don't want to open source their iOS, that's fine. They say "what consumers do with those tools is up to them", but then they lock those tools down TIGHT. Actions speak much louder than words. They say those tools are ours? They need to show us that this is true. permalink fedilink source parent
[–] shrugal@lemm.ee 45 points 3 years ago I'm sorry to disappoint you, but this is basically the same thing: https://blog.cloudflare.com/eliminating-captchas-on-iphones-and-macs-using-new-standard/ permalink fedilink source parent
[–] sik0fewl@kbin.social 33 points 3 years ago (1 child) Then what's this? https://httptoolkit.com/blog/apple-private-access-tokens-attestation/ permalink fedilink source parent hideshow 2 child comments replies: [–] ultratiem@lemmy.ca 9 points 3 years ago (4 children) A part of Apple’s long term, multi-stage deployment to phase out passwords entirely. They announced it last year during WWDC and said it will be messy and not without hurdles, but they’re committed to having strong cryptography without need for password at all. Related: https://www.wired.com/story/apple-passkeys-password-iphone-mac-ios16-ventura/ A far cry from what Google is trying to do or their long term plans (we all know Google is trying to siphon more ad revenue). Google’s proposition is as bad for Apple as it is for the rest of us. permalink fedilink source parent hideshow 8 child comments replies: [–] that_one_guy@beehaw.org 27 points 3 years ago (1 child) Honest to god doublethink right here. permalink fedilink source parent hideshow 2 child comments replies: [–] sin_free_for_00_days@sopuli.xyz 2 points 3 years ago It's crazy when I see it. And I see it far too often these days. permalink fedilink source parent [–] aberrate_junior_beatnik@midwest.social 13 points 3 years ago Passkeys (which are broader than just Apple) and this are not related at all. Regardless, Apple absolutely has interest in controlling browsers. Hell, they already do it on iOS, where you can't use any rendering engine other than theirs. The only reason they might be against this is because they feel they can't control it the way they want. permalink fedilink source parent [–] RandoCalrandian@kbin.social 2 points 3 years ago Curious how this push comes after fairly set standards that passwords can't be compelled permalink fedilink source parent [–] dan@upvote.au 1 point 3 years ago* I don't think it's related at all. You can implement passwordless technologies like FIDO2 and Webauthn without browser attestation. A far cry from what Google is trying to do or their long term plans It's literally very similar technology though, and none of us know Apple's long-term plans for it. It's well-known in the digital ad industry that Apple are trying to increase the size of their ad network. Locking down tracking (app tracking transparency) is also advantageous to them as it only applies to third parties - Apple can still track users. permalink fedilink source parent
[–] ultratiem@lemmy.ca 9 points 3 years ago (4 children) A part of Apple’s long term, multi-stage deployment to phase out passwords entirely. They announced it last year during WWDC and said it will be messy and not without hurdles, but they’re committed to having strong cryptography without need for password at all. Related: https://www.wired.com/story/apple-passkeys-password-iphone-mac-ios16-ventura/ A far cry from what Google is trying to do or their long term plans (we all know Google is trying to siphon more ad revenue). Google’s proposition is as bad for Apple as it is for the rest of us. permalink fedilink source parent hideshow 8 child comments replies: [–] that_one_guy@beehaw.org 27 points 3 years ago (1 child) Honest to god doublethink right here. permalink fedilink source parent hideshow 2 child comments replies: [–] sin_free_for_00_days@sopuli.xyz 2 points 3 years ago It's crazy when I see it. And I see it far too often these days. permalink fedilink source parent [–] aberrate_junior_beatnik@midwest.social 13 points 3 years ago Passkeys (which are broader than just Apple) and this are not related at all. Regardless, Apple absolutely has interest in controlling browsers. Hell, they already do it on iOS, where you can't use any rendering engine other than theirs. The only reason they might be against this is because they feel they can't control it the way they want. permalink fedilink source parent [–] RandoCalrandian@kbin.social 2 points 3 years ago Curious how this push comes after fairly set standards that passwords can't be compelled permalink fedilink source parent [–] dan@upvote.au 1 point 3 years ago* I don't think it's related at all. You can implement passwordless technologies like FIDO2 and Webauthn without browser attestation. A far cry from what Google is trying to do or their long term plans It's literally very similar technology though, and none of us know Apple's long-term plans for it. It's well-known in the digital ad industry that Apple are trying to increase the size of their ad network. Locking down tracking (app tracking transparency) is also advantageous to them as it only applies to third parties - Apple can still track users. permalink fedilink source parent
[–] that_one_guy@beehaw.org 27 points 3 years ago (1 child) Honest to god doublethink right here. permalink fedilink source parent hideshow 2 child comments replies: [–] sin_free_for_00_days@sopuli.xyz 2 points 3 years ago It's crazy when I see it. And I see it far too often these days. permalink fedilink source parent
[–] sin_free_for_00_days@sopuli.xyz 2 points 3 years ago It's crazy when I see it. And I see it far too often these days. permalink fedilink source parent
[–] aberrate_junior_beatnik@midwest.social 13 points 3 years ago Passkeys (which are broader than just Apple) and this are not related at all. Regardless, Apple absolutely has interest in controlling browsers. Hell, they already do it on iOS, where you can't use any rendering engine other than theirs. The only reason they might be against this is because they feel they can't control it the way they want. permalink fedilink source parent
[–] RandoCalrandian@kbin.social 2 points 3 years ago Curious how this push comes after fairly set standards that passwords can't be compelled permalink fedilink source parent
[–] dan@upvote.au 1 point 3 years ago* I don't think it's related at all. You can implement passwordless technologies like FIDO2 and Webauthn without browser attestation. A far cry from what Google is trying to do or their long term plans It's literally very similar technology though, and none of us know Apple's long-term plans for it. It's well-known in the digital ad industry that Apple are trying to increase the size of their ad network. Locking down tracking (app tracking transparency) is also advantageous to them as it only applies to third parties - Apple can still track users. permalink fedilink source parent
[–] Karlos_Cantana@sopuli.xyz 10 points 3 years ago https://httptoolkit.com/blog/apple-private-access-tokens-attestation/ permalink fedilink source parent
[–] thatsnothowyoudoit@lemmy.ca 8 points 3 years ago* (1 child) They do indeed: https://httptoolkit.com/blog/apple-private-access-tokens-attestation/ From the article: The focus here is primarily on removing captchas, and as such it's been integrated into Cloudflare (discussed here) and Fastly (here) as a mechanism for recognizing 'real' clients without needing other captcha mechanisms. Fundamentally though, it's exactly the same concept: a way that web servers can demand your device prove it is a sufficiently 'legitimate' device before browsing the web. permalink fedilink source parent hideshow 2 child comments replies: [–] takeda@beehaw.org 4 points 3 years ago So basically boiling frog slowly. permalink fedilink source parent
[–] takeda@beehaw.org 4 points 3 years ago So basically boiling frog slowly. permalink fedilink source parent