If they overcome / disable ad blocking, they will lose browser market share - and people don't design websites for marginal browsers with exotic features.
You underestimate the massive avarage userbase who doesn't even know what an adblocker is.
I find it hard to see how they could protect content from ad blockers without also crippling pages that self modify their own content. Perhaps they could put headers akin to content security policy that forbids external modification. Assuming a browser were to honour that header I could see bad publicity and a lot of people just moving to another browser which doesn't. Additionally, ad blockers aren't the only things that modify pages - breaking accessibility add ons could be more negative publicity (just like with Reddit).
I think browsers would be best off to let websites develop countermeasures if they're so sore about ad blockers. Perhaps they could use "self healing" Javascript libraries that put back content which is removed. Or they could just refuse to work if they detect an ad blocker, e.g. they stick some canaries in the DOM or along blocked paths to see if an ad blocker is present.
Having thought about it for a bit, it's possible for this proposal to be abused by authoritarian governments.
Suppose a government—say, Wadiya—mandated that all websites allowed on the Wadiyan Internet must ensure that visitors are using a list of verified browsers. This list is provided by the Wadiyan government, and includes: Wadiya On-Line, Wadiya Explorer, and WadiyaScape Navigator. All three of those browsers are developed in cooperation with the Wadiyan government.
Each of those browsers also happen to send a list of visited URLs to a Wadiyan government agency, and routinely scan the hard drive for material deemed "anti-social."
Because the attestations are cryptographically verified, citizens would not be able to fake the browser environment. They couldn't just download Firefox and install an extension to pretend to be Wadiya Explorer; they would actually have to install the spyware browser to be able to browse websites available on the Wadiyan Internet.
Once you get to that point it's gonna get back to dark web or some other nonstandard communication form to bypass the traditional http/https protocols for "web browsing".
🤔 People could just make a new protocol and build a separate internet from the ground up.
But they'd have to do it on free Linux computers, because the ones with Windows and Mac OSes (and the specially made chips) can be accessed directly by those companies. In principle, they can see into everyone's hard drives and add or delete shit to their whims. So a way around that would have to be found too. Scary...
I reported him on github, for all the good that will do.
Non-goals [...] Enforce or interfere with browser functionality, including plugins and extensions. [...]
But guys they gave their pinky promise it's totally fine
let's just allow them to irreversibly make this change so that there is nothing preventing them from applying this totally Non-Goals in the future what could happen
Also
Challenges and threats to address
[...] Tracking users’ browser history User agents will not provide any browsing information to attesters when requesting a token. We are researching an issuer-attester split that prevents the attester from tracking users at scale, while allowing for a limited number of attestations to be inspected for debugging—with transparency reporting and auditability [...]
Cross-site tracking
While attestation tokens will not include information to identify unique users, the attestation tokens themselves could enable cross-site tracking if they are re-used between sites. For example, two colluding sites could work out that the same user visited their sites if a token contains any unique cryptographic keys and was shared between their sites.
Good to see where your priorities lie in terms of user protection when deciding to launch this into conversation. Dude idk we'll fix it later don't worry bro
Before everyone starts complaining, remember:
This is for the ads. There are millions of starving ads on the internet right now. For just a click and load a day on every ad you see you too can help a billion dollar company survive.
"Please click on all the crosswalks before you can enter this site"
This is why people pirate things.
This comment is hilarious: https://github.com/RupertBenWiser/Web-Environment-Integrity/issues/51
It doesn't seem to be targeting ad-blockers in particular (or other page customizing extensions), although that may result eventually. What it does do is let webpages restrict what web browsers and operating systems you are allowed to use, just like how SafetyNet on Android lets apps restrict you to using an OS signed by Google. That could end up with web pages forcing you to use a web browser and OS the big players like Google, Microsoft and Apple, blocking any less restrictive or less used competors like Firefox and Linux, thus creating a cryptographically enforced oligopoly. And even if they signed e.g. Firefox, it would only be certain builds of it. That would make it impossible to make a truly open-source browser that can access pages using this API. Quite concerning.
It doesn’t seem to be targeting ad-blockers in particular (or other page customizing extensions), although that may result eventually.
That's just because they've learned not to say the quiet part out loud.
Privacy
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)