Google remote attestation system
lundi 13 novembre 2023 à 12:48Google says that it will use its remote attestation system ("Web Environment Integrity") only in the most oppressive scenario: as DRM.
Making Google drop the rest of the plan is a tactical advance, but it is not victory. Google still plans to prevent playing "embedded video" through an application that users can trust. Why could users trust that application? Precisely because Google could not trust it to impose Google's control over the users.
As long as companies have a way to control whether we use applications that we have modified, we are not safe! Our goal should be to prohibit the sale or distribution of computer systems that allow remote servers to do remote attestation of the software you choose to run on your computer to talk to them with.