Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Looks like Google just abandoned its "Web Environment Integrity" API plans (reddit.com)
65 points by thunderbong on Nov 3, 2023 | hide | past | favorite | 7 comments


There's some interesting information in that thread. Looks like Apple shipped their own WEI already and apparently nobody is talking about it.

https://httptoolkit.com/blog/apple-private-access-tokens-att...


It is very different because Safari is a pretty strong minority and not available to people not on Apple hardware. So few if any websites are going to require this attestation because most users will bail rather than buying a new phone.

That doesn't make it good, but it makes it far less concerning than the most popular browser by far implementing it.


Dupe of https://news.ycombinator.com/item?id=38121994 which already has lots of comments


Github Repo has the following [0]:

>> NOTE: This proposal is no longer pursued.

[0]: https://github.com/RupertBenWiser/Web-Environment-Integrity


TLDR: No. They're folding it into Android. And since developers are getting reassigned, from the perspective of that person, probably the entire team, it is indeed being abandoned. Except it is not.



Can it be turned off? That should be an easy fuck you from EU devices if we’re not able to disable it.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: