Lemmy NZ

Apple has deployed a system called Private Access Tokens that allows web servers to verify if a device is legitimate before granting access. This works by having the browser request a signed token from Apple proving the device is approved. While this currently has limited impact due to Safari's market share, there are concerns that attestation systems restrict competition, user control, and innovation by only approving certain devices and software. Attestation could lead to approved providers tightening rules over time, blocking modified operating systems and browsers. While proponents argue for holdbacks to limit blocking, business pressures may make that infeasible and Google's existing attestation does not do holdbacks. Fundamentally, attestation is seen as anti-competitive by potentially blocking competition between browsers and operating systems on the web.

Google non è il primo a pensare alla sua cosiddetta proposta di #DRM "Web Environment Integrity API", ma in realtà non sono nemmeno i primi a spedire. Apple ha già sviluppato e distribuito un sistema estremamente simile lo scorso anno, ora integrato in MacOS 13, iOS 16 e Safari, chiamato "Token di accesso privato":

I token di accesso privato sono potenti strumenti che dimostrano quando le richieste HTTP provengono da dispositivi 'legittimi'.

[Articolo in inglese.]

[ comments | sourced from HackerNews ]

There is a discussion on Hacker News, but feel free to comment here as well.