And since you won’t be able to modify web pages, it will also mean the end of customization, either for looks (ie. DarkReader, Stylus), conveniance (ie. Tampermonkey) or accessibility.

The community feedback is… interesting to say the least.

  • @Araozu
    link
    English
    91 year ago

    Wouldn’t spoofing work? Like, if the browser just sends “yes, no extensions, adblock, blah blah” then how would the attestation server know if that’s true? Or does it require signed binaries, or some special hardware?

    • @vvvvv
      link
      English
      141 year ago

      That is conveniently left out of the speck. Attestation server may require signed binary on a client system, it may require whatever it wants really, because why not? It’s a website who decides to trust attestation server or not.

    • @[email protected]
      link
      fedilink
      English
      71 year ago

      Depends on if they used cryptographic signatures. Those would be impossible to spoof because any change in the client would change the hash completely.

      • @Araozu
        link
        English
        161 year ago

        Google silently shipping signed chrome executables soon…

        And then people wonder why non chromium browsers are important