We (me with a friend) created this page https://openwebdefenders.org and planning to create banners for websites that may want to inform their users on what's going on.

If anyone wants to contribute somehow or have other ideas I would be happy to discuss on https://github.com/openwebdefenders/web/issues

  • starman@programming.dev
    ·
    edit-2
    1 year ago

    Do you use browsers other than the mainstream ones like Chrome or Firefox? Third-party browsers, especially those that prioritize privacy or offer unique features, might be labeled “untrusted,” limiting your browsing experience.

    This suggests that firefox will be trusted, because it's mainstream, which is not true, because Mozilla won't implement WEI, and therefore malicious websites won't be able to verify "environment integrity"

    Besides that, nice website and thanks for your efforts on fighting with WEI.

    • Paradoxvoid@aussie.zone
      ·
      1 year ago

      I'd also argue Firefox is hardly mainstream at ~3% usage. Edge would be a better replacement given it comes with every Windows install (and many corporate environments don't allow using an alternative).

      • Faresh@lemmy.ml
        ·
        edit-2
        1 year ago

        It is only used by 3%!? Wasn't it at around 30% some years ago (not counting netscape)? This comes really as a surprise to me because in my circles even around half of non-tech inclined windows users use firefox.

        Why did it lose so many users?

        • coehl@programming.dev
          ·
          edit-2
          1 year ago

          Yes. But what kind of person needs to be told this stuff? The kind of person that already knows about WEI and that most mainstream browsers are chrome based except ff?

          No. This message, then, isn't for you and me, is it? Normal folks out there will hear that chrome is the issue and they'll switch to edge. The suggestion, while not technically accurate, achieves the goal much more efficiently.

    • Mikina@programming.dev
      ·
      edit-2
      1 year ago

      Mozilla won’t implement WEI

      They are going to fight against WEI. Tooth and nails, for our sakes!

      Just like they did with EME, the closed source video DRM in 2014. By being deeply concerned with the direction the web is going, and definitely against it, but...

      We face a choice between a feature our users want and the degree to which that feature can be built to embody user control and privacy.

      With most competing browsers and the content industry embracing the W3C EME specification, Mozilla has little choice but to implement EME as well so our users can continue to access all content they want to enjoy.

      Despite our dislike of DRM, we have come to believe Firefox needs to provide a mechanism for people to watch DRM-controlled content.

      DRM requires closed systems to operate as currently required and is designed to remove user control, so Mozilla is taking steps to find alternative solutions to DRM. But Mozilla also believes that until an alternative system is in place, Firefox users should be able to choose whether to interact with DRM in order to watch streaming videos in the browser.

      https://blog.mozilla.org/en/mozilla/drm-and-the-challenge-of-serving-users/

      https://hacks.mozilla.org/2014/05/reconciling-mozillas-mission-and-w3c-eme/

    • kus@programming.dev
      ·
      1 year ago

      I am not convinced Mozilla will refuse to implement WEI when push comes to shove. Mozilla already supports Netflix playback with drm, right?

  • glad_cat@lemmy.sdf.org
    ·
    1 year ago

    Change the sentence "Do you use browsers other than the mainstream ones like Chrome or Firefox" because Firefox is already a very small third-party browser.

    • Efwis@lemmy.zip
      ·
      1 year ago

      How is Firefox a small 3rd party browser? FF is the basis for browsers like libreoffice, icewolf etc.. it is not 3rd party, it is first party like chrome, opera and safari. Actually if you want to go that far, chrome actually started off as a fork of opera

      • glad_cat@lemmy.sdf.org
        ·
        1 year ago

        Firefox is used by less than 3% of the users, it should not be used in this sentence. Also I'm not sure they'll implement the integrity thing, which is another issue.

        • Efwis@lemmy.zip
          ·
          1 year ago

          I agree Firefox doesn’t have a large share of the browsers, but if you are basing it on user share then the only mainstream browsers are safari and chrome. However, the term third party is generally utilized as a fork of a primary access point or is the access point via another means, even if it’s original.

          For example, the apps to access lemmy are third party as they are not created by the original devs for lemmy. In this argument FF is classified as first party not third.

          Don’t get me wrong I understood what you were trying to say, but based on your reply then pretty much chrome would be the only mainstream browser.

      • alvanrahimli@lemmy.ml
        hexagon
        ·
        1 year ago

        I understand what glad_cat means, and they are kinda correct. On the other hand, FF (at least, for now) won't be implementing this change.

        • Efwis@lemmy.zip
          ·
          1 year ago

          I do too, but his reasoning is flawed. Based on his reasoning that would be saying Lemmy is a third party site because it doesn’t have the user share that Reddit does.

          Microsoft’s edge browser is a fork of chromium, it’s not even first party anymore, like IE was.

  • Quereller@lemmy.one
    ·
    1 year ago

    I don't know about web environment integrity or where this will lead but I remember the time trusted computing and TPMs came up. At this time, people were really scared that this is the end of Linux (on PC). Today, I use secure boot (with my MOK) on my consumer distro just fine.