Jump to content

Web Environment Integrity: Difference between revisions

From Wikipedia, the free encyclopedia
Content deleted Content added
Tomayac (talk | contribs)
m Minor corrections
Reception: "open web" is not capitalized, thanks tho
Tag: Reverted
Line 9: Line 9:


== Reception ==
== Reception ==
The proposal has been widely criticized for limiting general purpose computing and being against the [[Open Web]], with some comparing WEI to [[digital rights management]] (DRM).<ref>{{Cite web |last=Amadeo |first=Ron |date=2023-07-24 |title=Google’s nightmare "Web Integrity API" wants a DRM gatekeeper for the web |url=https://arstechnica.com/gadgets/2023/07/googles-web-integrity-api-sounds-like-drm-for-the-web/ |access-date=2023-07-26 |website=[[Ars Technica]] |language=en-us}}</ref><ref>{{Cite web |last=Claburn |first=Thomas |title=Google Web Environment Integrity draft draws developer rage |url=https://www.theregister.com/2023/07/25/google_web_environment_integrity/ |access-date=2023-07-26 |website=[[The Register]] |language=en}}</ref>
The proposal has been widely criticized for limiting general purpose computing and being against the [[open web]], with some comparing WEI to [[digital rights management]] (DRM).<ref>{{Cite web |last=Amadeo |first=Ron |date=2023-07-24 |title=Google’s nightmare "Web Integrity API" wants a DRM gatekeeper for the web |url=https://arstechnica.com/gadgets/2023/07/googles-web-integrity-api-sounds-like-drm-for-the-web/ |access-date=2023-07-26 |website=[[Ars Technica]] |language=en-us}}</ref><ref>{{Cite web |last=Claburn |first=Thomas |title=Google Web Environment Integrity draft draws developer rage |url=https://www.theregister.com/2023/07/25/google_web_environment_integrity/ |access-date=2023-07-26 |website=[[The Register]] |language=en}}</ref>


{| class="wikitable" style="margin:auto"
{| class="wikitable" style="margin:auto"

Revision as of 01:15, 18 August 2023

Web Environment Integrity (WEI) is an API proposal currently being developed for Google Chrome.[1] As of August 2023, a Web Environment Integrity prototype exists in Chromium,[2] but has not shipped in any browser.[3][non-primary source needed]

Proposal

Sequence diagram showing WEI attestation

The draft proposes an API for websites to get a digitally-signed token that contains the certifier's name and whether or not they deem the web client to be authentic. The stated goal is to only allow access to certain sites for human users instead of automated programs and "allow web servers to evaluate the authenticity of the device and honest representation of the software stack and the traffic from the device". Access to this API will not be allowed in non-secure (HTTP) contexts.[4]

Reception

The proposal has been widely criticized for limiting general purpose computing and being against the open web, with some comparing WEI to digital rights management (DRM).[5][6]

Entity Date Opinion Quote
Mozilla 2023-07-25 Oppose contradicts our principles and vision for the Web[7]
Vivaldi 2023-07-27 Oppose dangerous[8]
Free Software Foundation 2023-07-29 Oppose all-out attack on the free Internet[9]
Brave Software 2023-07-31 Oppose junk that Google puts into Chromium[10]
Electronic Frontier Foundation 2023-08-07 Oppose a bad idea that Google should not pursue[11]
World Wide Web Consortium 2023-08-11 None not being worked on in W3C, nor has there been any submission [for W3C] review[12]

Chris Palmer, a former Google engineer, expressed concerns about the API's effect on the openness of the web as a mainstream application platform and called for its retraction.[13]

See also

References

  1. ^ Amadeo, Ron (2023-08-03). "Google's nightmare "Web Integrity API" wants a DRM gatekeeper for the web". Ars Technica. Retrieved 2023-08-03.
  2. ^ "Web Environment Integrity (WEI)". GitHub. 28 June 2023. Retrieved 2023-08-04.{{cite web}}: CS1 maint: url-status (link)
  3. ^ "Chrome Platform Status". chromestatus.com. Retrieved 2023-08-15.
  4. ^ "Web-Environment-Integrity/explainer.md at main · RupertBenWiser/Web-Environment-Integrity". GitHub. Retrieved 2023-07-26.
  5. ^ Amadeo, Ron (2023-07-24). "Google's nightmare "Web Integrity API" wants a DRM gatekeeper for the web". Ars Technica. Retrieved 2023-07-26.
  6. ^ Claburn, Thomas. "Google Web Environment Integrity draft draws developer rage". The Register. Retrieved 2023-07-26.
  7. ^ "Request for Position: Web Environment Integrity API · Issue #852 · mozilla/standards-positions". GitHub. Retrieved 2023-07-26.
  8. ^ "Unpacking Google's new "dangerous" Web-Environment-Integrity specification". Vivaldi Browser. 2023-07-25. Retrieved 2023-07-26.
  9. ^ Farough, Greg (2023-07-28). ""Web Environment Integrity" is an all-out attack on the free Internet". Free Software Foundation. Retrieved 2023-07-28.
  10. ^ Brinkmann, Martin (31 July 2023). "Brave Browser won't support Google's Web Environment Integrity API". ghacks.net. Retrieved 31 July 2023.
  11. ^ Doctorow, Cory; Hoffman-Andrews, Jacob (2023-08-07). "Your Computer Should Say What You Tell It To Say". www.eff.org. Retrieved 2023-08-07.
  12. ^ "Web Environment Integrity has no standing at W3C; understanding new W3C work". www.w3.org. 2023-08-11. Retrieved 2023-08-11.
  13. ^ Patange, Tanmay (2023-07-29). "Former Google Engineer Speaks Out Against Controversial Web Environment Integrity API Proposal". Techtsp. Retrieved 2023-07-29.