And since you won’t be able to modify web pages, it will also mean the end of customization, either for looks (ie. DarkReader, Stylus), conveniance (ie. Tampermonkey) or accessibility.

The community feedback is… interesting to say the least.

4 points
*

This post title is misleading.

They aren’t proposing a way for browsers to DRM page contents and prevent modifications from extensions. This proposal is for an API that allows for details of the browser environment to be shared and cryptographically verified. Think of it like how Android apps have a framework to check that a device is not rooted, except it will also tell you more details like what flavor of OS is being used.

Is it a pointless proposal that will hurt the open web more than it will help? Yes.

Could it be used to enforce DRM? Also, yes. A server could refuse to provide protected content to unverified browsers or browsers running under an environment they don’t trust (e.g. Linux).

Does it aim to destroy extensions and adblockers? No.
Straight from the page itself:

Non-goals:

  • Enforce or interfere with browser functionality, including plugins and extensions.

Edit: To elaborate on the consequences of the proposal…

Could it be used to prevent ad blocking? Yes. There are two hypothetical ways this could hurt adblock extensions:

  1. As part of the browser “environment” data, the browser could opt to send details about whether built-in ad-block is enabled, any ad-block extensions are enabled, or even if there are any extensions installed at all.

Knowing this data and trusting it’s not fake, a website could choose to refuse to serve contents to browsers that have extensions or ad blocking software.

  1. This could lead to a walled-garden web. Browsers that don’t support the standard, or minority usage browsers could be prevented from accessing content.

Websites could then require that users visit from a browser that doesn’t support adblock extensions.

I’m not saying the proposal is harmless and should be implemented. It has consequences that will hurt both users and adblockers, but it shouldn’t be sensationalized to “Google wants to add DRM to web pages”.

Edit 2: Most of the recent feedback on the GitHub issues seems to be lacking in feedback on the proposal itself, but here’s some good ones that bring up excellent concerns:

permalink
report
reply
-2 points
*

Lets break the near monopoly they have and give what google wants the finger.

https://duckduckgo.com/windows

You know how nearly every browser is now based on chromium? And firefox when its not chromium, and even forefox adopted the extension limitations of chrome? Well I hear Duckduckgo’s new browser something new finally instead of based off an existing browser.

It doesn’t have extensions yet but those are coming and adblock is baked in.

Ed: my 1st downvotes of my time on the fediverse. <3 you to folks.

permalink
report
reply
18 points
*

We should harass the fuck out of this guy until he removes it. This shit is completely uncalled for.

permalink
report
reply
6 points

It was called Flash, Shockwave, and silverlight. They all met the same fate

permalink
report
reply
-17 points

Not comparable at all

permalink
report
parent
reply
4 points

At least Flash had cool videogames

permalink
report
parent
reply
22 points

Eh, this is pretty different though. I see this as a much bigger threat.

permalink
report
parent
reply
3 points
*
Deleted by creator
permalink
report
parent
reply

Theoretically?

https://ruffle.rs/

permalink
report
parent
reply
2 points
*
Deleted by creator
permalink
report
parent
reply
-11 points
*

you misunderstood it tbh.
it’s supposed to be used as a way to skip bot verification if the requests are signed by a drm system which includes your unique id (coming from google account or google play id), and one of the goals of the actual proposal is keeping existing extension working AND keeping web pages working without drm.
of course i don’t want any drm in my browser, but it’s kinda already there anyway…
it will likely make the experience worse for non-drm users because they will get hit by more advanced and sensitive bot verification systems or rate limits which is kinda bad but not the end of the world.
y’all are just overreacting and spreading pure bullshit.
it’s not even supposed to be used to verify DOM elements, just that the user is using an official Chrome/Chromium browser, and is not automated.
basically it’s just SafetyNet.
it will not kill js addons.

permalink
report
reply

Privacy

!privacy@lemmy.ml

Create post

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

Community stats

  • 4.6K

    Monthly active users

  • 2.9K

    Posts

  • 78K

    Comments