@[email protected] to [email protected]English • 10 months agoApple already shipped attestation on the web, and we barely noticedhttptoolkit.commessage-square86fedilinkarrow-up1331cross-posted to: [email protected][email protected][email protected][email protected][email protected]
arrow-up1316external-linkApple already shipped attestation on the web, and we barely noticedhttptoolkit.com@[email protected] to [email protected]English • 10 months agomessage-square86fedilinkcross-posted to: [email protected][email protected][email protected][email protected][email protected]
minus-square@[email protected]linkfedilinkEnglish3•10 months agoFor sites that support it, you don’t have to fill out a captcha. Instead it transmits a list of running processes (or other, formerly private info).
minus-square@[email protected]linkfedilinkEnglish1•10 months ago^Instead it transmits a list of running processes (or other, formerly private info). No it doesn’t. Attestation is simply a cryptographicly signed “we trust this user is human” message.
minus-square@[email protected]linkfedilinkEnglish1•10 months agoBased on the spec. The token is simply a signature that can be checked at the issuing party (Apple for this news item).
For sites that support it, you don’t have to fill out a captcha.
Instead it transmits a list of running processes (or other, formerly private info).
^Instead it transmits a list of running processes (or other, formerly private info).
No it doesn’t. Attestation is simply a cryptographicly signed “we trust this user is human” message.
Based on what?
Based on the spec. The token is simply a signature that can be checked at the issuing party (Apple for this news item).