3 ms·
As long as the mechanism will be open source standard and isn’t controlled by corporations AND the user browsers are in control to enable/disable it, sure.
by tamimio 3y ago
As long as the mechanism will be open source standard and isn’t controlled by corporations AND the user browsers are in control to enable/disable it, sure.
- VoxPelli 3y agoIt is an open standard: https://datatracker.ietf.org/doc/html/draft-ietf-privacypass-auth-scheme https://datatracker.ietf.org/doc/html/draft-ietf-privacypass... "Privacy Pass tokens are unlinkable, one-time-use authenticators that can be used to anonymously authorize a client" People from Apple, Google and Cloudflare are all editors of the spec and eg Fastly has also blogged about it: https://www.fastly.com/blog/private-access-tokens-stepping-into-the-privacy-respecting-captcha-less https://www.fastly.com/blog/private-access-tokens-stepping-i... Excerpt from Fastly's article above: > When you put this together, no one entity can link client identity to website activity. And yet, this authorizes access to a website – all while eliminating human interactions.
- hellojesus 3y agoWhat mechanism exists to prevent the attester from colluding with the issuer or origin to track users? Could a government subpoena these entities to track entire user history down to the tpm key?