3 ms·

How?

• toyg 3y ago
  The whole point of WEI is that the site can choose to block any combination of browser and OS they see fit, in a reliable way (currently, browsers can freely lie). CURL and friends will almost immediately be branded as bots and banned - that's the stated objective.
  • pdanpdan 3y ago
    How? The page must first load, then it requests an attestation using js and sends it back to the server for further use (like a recaptcha token). So for something like curl it could be no change. https://github.com/RupertBenWiser/Web-Environment-Integrity/blob/main/explainer.md#how-it-works https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  • snvzz 3y ago
    It is more severe than that. The design favors a whitelist approach: Only browsers that can get the attestation from a "trusted source" are allowed. Browsers that cannot, don't.