Hacker News new | ask | show | jobs
by helen___keller 1054 days ago
The scary part isn’t what happens with attestation on todays web, it’s what kind of web gets built tomorrow when the vast majority of users support attestation.

The author of WEI acknowledges this risk but the only mitigation is a suggestion that maybe browsers can occasionally hold off on attesting - basically, letting market share of attestation hold just shy of 100% in hopes that it doesn’t dominate the web.

I’m sure the future google engineer who removes this restriction and saves 10% of chrome sessions from captchas will also get a promotion.

1 comments

until sites "find a way" to ask multiple times for attestation (if it has a 10% chance of failing on each request and 10 of them in a row fail, what's chance of the client supporting WEI and randomly holding off on all of them?)

"find a way" because it won't be hard.