973
Google's New Web Environment Integrity Proposal Dismissed by Brave, Mozilla, and Vivaldi (news.itsfoss.com)
submitted 3 years ago by to c/technology@beehaw.org
106 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 117 points 3 years ago (15 children)

Will have to wait and see how Apple reacts with Safari. Mozilla dismissing the proposal is big, but Apple has the second largest mobile OS marketshare with iOS, and so Safari is very relevant for websites to support it.

  • permalink
  • fedilink
  • source
  • hideshow 15 child comments
    •
  • [–] 29 points 3 years ago (14 children)

    Doesn't Safari already have their own version of this?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 14 child comments
    •
  • [–] 48 points 3 years ago* (last edited 3 years ago) (10 children)

    Lmao, no. Google is out of their minds. Apple has zero interest in controlling browsers or ads.

    https://money.cnn.com/2017/08/31/technology/business/apple-net-neutrality/index.html

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 100 points 3 years ago

    From the article:

    "We work hard to build great products, and what consumers do with those tools is up to them — not Apple, and not broadband providers," Cynthia Hogan, VP of public policy at Apple

    Prove it, then. Unlock the bootloader. Allow us to install our own apps. Let us install our own OS on the hardware. I get they don't want to open source their iOS, that's fine. They say "what consumers do with those tools is up to them", but then they lock those tools down TIGHT. Actions speak much louder than words. They say those tools are ours? They need to show us that this is true.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 33 points 3 years ago (6 children)
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 9 points 3 years ago (5 children)

    A part of Apple’s long term, multi-stage deployment to phase out passwords entirely. They announced it last year during WWDC and said it will be messy and not without hurdles, but they’re committed to having strong cryptography without need for password at all.

    Related: https://www.wired.com/story/apple-passkeys-password-iphone-mac-ios16-ventura/

    A far cry from what Google is trying to do or their long term plans (we all know Google is trying to siphon more ad revenue).

    Google’s proposition is as bad for Apple as it is for the rest of us.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 13 points 3 years ago

    Passkeys (which are broader than just Apple) and this are not related at all. Regardless, Apple absolutely has interest in controlling browsers. Hell, they already do it on iOS, where you can't use any rendering engine other than theirs.

    The only reason they might be against this is because they feel they can't control it the way they want.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 3 years ago*

    I don't think it's related at all. You can implement passwordless technologies like FIDO2 and Webauthn without browser attestation.

    A far cry from what Google is trying to do or their long term plans

    It's literally very similar technology though, and none of us know Apple's long-term plans for it. It's well-known in the digital ad industry that Apple are trying to increase the size of their ad network. Locking down tracking (app tracking transparency) is also advantageous to them as it only applies to third parties - Apple can still track users.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 8 points 3 years ago* (1 child)

    They do indeed: https://httptoolkit.com/blog/apple-private-access-tokens-attestation/

    From the article:

    The focus here is primarily on removing captchas, and as such it's been integrated into Cloudflare (discussed here) and Fastly (here) as a mechanism for recognizing 'real' clients without needing other captcha mechanisms.

    Fundamentally though, it's exactly the same concept: a way that web servers can demand your device prove it is a sufficiently 'legitimate' device before browsing the web.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •