KoinuJul 19, 2023

This is a credible proposal for DRM for websites in general. It would enable unbeatable adblock-blocking. It would prevent user customization for not just convenience but also accessibility.

I do not say this lightly: Enabling the forfeiture of control over the browsing experience is a fundamentally evil idea that must be rejected now, as it has been in the past, and we must remain vigilant against its reemergence in the future.

https://github.com/RupertBenWiser/Web-Environment-Integrity/blob/main/explainer.md

Web-Environment-Integrity/explainer.md at main · RupertBenWiser/Web-Environment-Integrity

Contribute to RupertBenWiser/Web-Environment-Integrity development by creating an account on GitHub.

GitHub
Show threadErica "digifox" Kovac 🌐⚛️⚡
@gsderp The explainer specifically outlines that an important goal is to ensure it *cannot* be used in the way you are describing.
Jul 20, 2023 at 3:27pmWeb
Show threadKoinuJul 20, 2023

@digifox As a framework it doesn’t and can’t do anything to mitigate against sites deciding to trust only attesters that require immoral (anti-user freedom) criteria as part of their “baseline”.

The “holdback” mitigation is incapable of delivering the stated goals of making sure this isn’t usable for discrimination. The framework is prima facie immoral if the holdback percentage isn’t high enough to to make this useless for every case except measuring ad fraud. However, If holdback isn’t stable, even if the holdback percentage is high, sites can still discriminate against users that never pass it. If the set of held-back destinations is stable the set of held-back destinations becomes a useful and durable fingerprint. Furthermore there’s the relatively intractable problem of destinations colluding to share trust signals and enabling discrimination based on that.

There is no open web if an attestation framework gains critical mass, so such a framework must not be allowed to exist.

Show threadErica "digifox" Kovac 🌐⚛️⚡Jul 21, 2023
@gsderp to be clear: I agree with you. But by specifying this as a design goal it is effectively drawing a line in the sand that any solution that doesn't meet it is not acceptable and the proposal will be scrapped or drastically overhauled.
Show threadKoinuJul 21, 2023
@digifox They haven’t even bothered to reject the issue complaining that there should be zero holdbacks because any holdbacks at all would make it useless for (evil) use cases.