Android 14 blocks all modification of system certificates, even as root (httptoolkit.com)
Apple already shipped attestation on the web, and we barely noticed (httptoolkit.com)
Apple already shipped attestation on the web(DRM), and we barely noticed (httptoolkit.com)
Apple already shipped attestation on the web(DRM), and we barely noticed (httptoolkit.com)
Apple already shipped attestation on the web, and we barely noticed (httptoolkit.com)
Apple has deployed a system called Private Access Tokens that allows web servers to verify if a device is legitimate before granting access. This works by having the browser request a signed token from Apple proving the device is approved. While this currently has limited impact due to Safari’s market share, there are concerns...
Turns out that Web Environment Integrity proposal everybody is getting angry about (imo very legitimately) was effectively already shipped by Apple in Safari last year (httptoolkit.com)
Apple already shipped attestation on the web, and we barely noticed (httptoolkit.com)