Technology

61464 readers

7327 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago

MODERATORS

151

Apple already shipped attestation on the web, and we barely noticed (httptoolkit.com)

submitted 2 years ago by dantheclamman to c/technology

37 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] moistclump 5 points 2 years ago (1 children)

Can someone eli5 “shipped attestation”?

[–] [email protected] 9 points 2 years ago* (last edited 2 years ago)

Alice gives Bob a Secret Note.
Alice and Bob agree on a way for Bob to scramble the Secret Note so that Alice can unscramble it.
Bob scrambles the Secret Note.
Bob gives Carol the Scrambled Secret Note.
Carol gives Alice the Scrambled Secret Note.
Alice descrambles the Scrambled Secret Note.
Alice tells Carol the Secret Note came from Bob.

Now, Carol trusts Alice and Alice trusts Bob. By passing this note around, Carol can trust Bob since Alice trusts Bob and she trusts Alice.

Passing the note around tells Carol (Web Server) that Bob (Web Browser) has trust from Alice (Attestation Server) and is not some imposter just claiming to be Bob.