3 ms·

So the problem was that it didn't steal enough control away from users?

charcircuit 3y ago
No, the problem was the attestation was not of the entire stack. By not attesting the web extentions someone could create malicous web extentions to bypass the security of the system. As a reminder attestation does not steal control away from users. They are free to use whatever software and do whatever they want. They just will not be able to attest to a server that they were using a trusted stack in the case they were not.
- hooverd 3y ago
  Sure, if you have a fundamentally different view of the Internet as approved dumb terminals rather than devices communicating over protocols. Say it with with your chest. Saying you'll still be allowed to run your own programs here is like saying you'll still have free speech as long as you stick on the approved free speech zones.
  - charcircuit 3y ago
    On the internet users have never had total control over the websites they have interacted with. The owner of the website has the control. Attestation doesn't change this. Users control their machines and software and websites control theirs.
    - hooverd 3y ago
      Attention means that websites de facto control user's machines. If everyone uses it and they will you don't have a choice.
      - charcircuit 3y ago
        No, it doesn't. Gambling sites don't control people into becoming 18+. Being of the appropriate age is just proof the user gives before the websites offers service. Similarly by having people prove what software stack they are using to a website, that website may be able to improve the user experience for everyone.
        hooverd 3y ago
        This isn't identity proofing! I believe websites shouldn't be allowed to discriminate based on software stack. Who decides what software stack is blessed? If it's about piracy and ad blocking, say it with your chest, don't say it's about my user experience.
        charcircuit 3y ago
        >Who decides what software stack is blessed? It should be up to a site to be the one who chooses what stacks to trust and how much trust to put in them or what to trust them with. I do think a way to delegate a third party to manage what to trust would be useful so new browsers would only have to go to a few big players instead of every single site to get their browser trusted. >If it's about piracy and ad blocking, say it with your chest, don't say it's about my user experience. It can be about both. You specifically asked for ways it improved the user experience, so I gave you that.

No, the problem was the attestation was not of the entire stack. By not attesting the web extentions someone could create malicous web extentions to bypass the security of the system. As a reminder attestation does not steal control away from users. They are free to use whatever software and do whatever they want. They just will not be able to attest to a server that they were using a trusted stack in the case they were not.

hooverd 3y ago
Sure, if you have a fundamentally different view of the Internet as approved dumb terminals rather than devices communicating over protocols. Say it with with your chest. Saying you'll still be allowed to run your own programs here is like saying you'll still have free speech as long as you stick on the approved free speech zones.
- charcircuit 3y ago
  On the internet users have never had total control over the websites they have interacted with. The owner of the website has the control. Attestation doesn't change this. Users control their machines and software and websites control theirs.
  - hooverd 3y ago
    Attention means that websites de facto control user's machines. If everyone uses it and they will you don't have a choice.
    - charcircuit 3y ago
      No, it doesn't. Gambling sites don't control people into becoming 18+. Being of the appropriate age is just proof the user gives before the websites offers service. Similarly by having people prove what software stack they are using to a website, that website may be able to improve the user experience for everyone.
      - hooverd 3y ago
        This isn't identity proofing! I believe websites shouldn't be allowed to discriminate based on software stack. Who decides what software stack is blessed? If it's about piracy and ad blocking, say it with your chest, don't say it's about my user experience.
        charcircuit 3y ago
        >Who decides what software stack is blessed? It should be up to a site to be the one who chooses what stacks to trust and how much trust to put in them or what to trust them with. I do think a way to delegate a third party to manage what to trust would be useful so new browsers would only have to go to a few big players instead of every single site to get their browser trusted. >If it's about piracy and ad blocking, say it with your chest, don't say it's about my user experience. It can be about both. You specifically asked for ways it improved the user experience, so I gave you that.