316
Apple already shipped attestation on the web, and we barely noticed (httptoolkit.com)
submitted 3 years ago by to c/technology@lemmy.world
78 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 57 points 3 years ago (11 children)

The danger would be important entities like governments and banks using attestation. Then you'd be limited to using only Chrome, Safari and Edge, and Firefox could kiss its ass goodbye.

  • permalink
  • fedilink
  • source
  • hideshow 11 child comments
    •
  • [–] 43 points 3 years ago (4 children)

    Bank: my bank is too boomercore to ever implement something like this, we only recently got 2fa

    Government: my government still makes me file my taxes on paper and mail it to them so I’m ok for now

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 21 points 3 years ago (3 children)

    Banks and governments could get trapped into this because a third party vendor implements a system for them that includes this.

    Like Salesforce's "Lightning Experience sites" only supports the latest versions of iOS and Android, as well as only supporting chromium based browsers and Firefox.

    A lot of banks and government services run on that platform, and not all of them are going to be smart enough to pay for a custom solution that increases device support.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 3 points 3 years ago (2 children)

    It’s less about what they implement, and more about what their users who have clout expect. My regional bank is far more responsive to customer feedback than, for example, Bank of America. As for governments there’s all sorts of bureaucracy I can push on with not a lot of resources. It’s not accessible to everyone but organizations don’t need all that much prodding to respond anyway

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 3 years ago* (1 child)

    Salesforce dictates what they support now, not on what people want. If an entity implements it, they can use the put of the box functionality or pay to have it customized to increase accessibility, security and support.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 5 points 3 years ago (2 children)

    The EU wouldn't really stand for that.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 3 years ago* (last edited 3 years ago)

    The EU lets them get away with requiring device attestation for their mobile apps. It's not exactly the same thing since system requirements for native apps are traditionally narrower than websites, but it's similar.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 3 years ago*

    In the UK at least, switching banks is super easy, I’ve done in twice in the last 2 months because they offered free cash to do so, there is enough competition that the banks have to make it easy to move or else they lose customers.

    For government, generally most systems are built to be as accessible as they can be because there has been [https://www.gov.uk/guidance/accessibility-requirements-for-public-sector-websites-and-apps ](whole raft of legislation) written up to cover this.

    I’m not saying it wouldn’t be a problem (power companies etc could prove to be sticky) but there are legal requirements that entities above a certain site have to meet.

  • permalink
  • fedilink
  • source
  • parent