3 ms·
The whole point of WEI is that the site can choose to block any combination of browser and OS they see fit, in a reliable way (currently, browsers can freely li
by toyg 3y ago
The whole point of WEI is that the site can choose to block any combination of browser and OS they see fit, in a reliable way (currently, browsers can freely lie). CURL and friends will almost immediately be branded as bots and banned - that's the stated objective.
- pdanpdan 3y agoHow? The page must first load, then it requests an attestation using js and sends it back to the server for further use (like a recaptcha token). So for something like curl it could be no change. https://github.com/RupertBenWiser/Web-Environment-Integrity/blob/main/explainer.md#how-it-works https://github.com/RupertBenWiser/Web-Environment-Integrity/...
- snvzz 3y agoIt is more severe than that. The design favors a whitelist approach: Only browsers that can get the attestation from a "trusted source" are allowed. Browsers that cannot, don't.