Untitled attachment

Notices where this attachment appears

1. Tim Perry (pimterry@toot.cafe)'s status on Wednesday, 26-Jul-2023 03:20:12 JST Tim Perry

   Turns out that Web Environment Integrity proposal everybody is getting angry about (imo very legitimately) was effectively already shipped by Apple in Safari last year: https://httptoolkit.com/blog/apple-private-access-tokens-attestation/

   That means if Chromium ships it too, we could quickly move to 90%+ of browser traffic being attested. Not good!