3 ms·
I'm surprised Apple PAT and Google WEI wasn't mentioned in the article. Especially since Apple has partnered with Cloudflare on PAT.
by alberth 3y ago
I'm surprised Apple PAT and Google WEI wasn't mentioned in the article.
Especially since Apple has partnered with Cloudflare on PAT.
- joshstrange 3y agoThey do mention it (Google's at least) in this section [0] [0] https://jrhawley.ca/2023/08/07/blocked-by-cloudflare#implications-for-the-web-in-general https://jrhawley.ca/2023/08/07/blocked-by-cloudflare#implica...
- CharlesW 3y agoAlso, the scope of PATs is vastly different than WEI. Think of PATs as a "probably a human" signal that mostly replaces the need for CAPTCHAs. https://blog.cloudflare.com/how-to-enable-private-access-tokens-in-ios-16-and-stop-seeing-captchas/ https://blog.cloudflare.com/how-to-enable-private-access-tok...
- jsnell 3y agoTheir scope is the same [0], both in terms of stated intent as well as what kind of things they could be used to attest. The only significant differences are that one is already deployed in prod while one isn't, one got a marketing blitz while the other didn't, and that they're done by different companies. There are no vast technical differences, only incredibly subtle ones. [0] https://www.snellman.net/blog/archive/2023-07-25-web-integrity-api-vs-private-access-tokens/ https://www.snellman.net/blog/archive/2023-07-25-web-integri...