Comment by dgrin91

21 hours ago

Maybe a dumb question, but how is this suppose to work for iphone users? They wont have google play, and it seems like android/google play is required here? There is no way they would cut out such a huge chunk of the market.

Apple has device attestation deployed like one year before Google even proposed it: https://httptoolkit.com/blog/apple-private-access-tokens-att...

  • hacker news when discovering that apple deployed WEI, for ages, with beloved IT company Cloudflare, affecting hundreds of millions of users: "aww, you're sweet"

    hacker news when reading that google is doing the same thing for the rest of the userbase: "hello, human resources?"

    • I thought that cloudflare system worked on any hardware and the tokens are anonymous. Did that change at some point? If it didn't change, then yeah it should get a very different reaction!

      (Edit: it looks like the new system is still private and still interlinked with the old system that lets you use any hardware? I think?)

      Also I don't know how you could have missed the widespread criticism of apple and especially cloudflare on this site.

      1 reply →

The claim is that an iPad/iPhone will also work. Not that that makes it acceptable; if anything, it's worse, because if it were Google Play only it'd be more obvious how unacceptable it is, whereas catering to the duopoly makes it less obvious how much it excludes people and builds a reliance on proprietary systems.

  • One company can soon dictate who can enter the websites. And only two commercial operating systems are viable in the world after this change. Not nice.

iPhones have attestation too: https://developer.apple.com/documentation/devicecheck/establ...

It'll just be more clunky because you have to install their app.