

3·
2 days agoThe author argues that passkey attestation would allow (eventually, via silent ratchet) any website to make demands about the software you run on your hardware. That would be a new thing and a reduction in freedom and privacy.


The author argues that passkey attestation would allow (eventually, via silent ratchet) any website to make demands about the software you run on your hardware. That would be a new thing and a reduction in freedom and privacy.
Here’s the gist doing side-by-side comparison (from Fairscan author)
https://gist.github.com/pynicolas/e018ef84464a2cf7949fa453e41cfead#code-comparison
I didn’t check it all but it looks like their should be attribution for this to Fairscan, both publicly and in the repo.
Ente’s repository has a single license file at the root and not much else so their licensing seems pretty lightweight, maybe that’s all they needed so far.
REUSE makes it easier to attribute per file where neccessary:
https://reuse.readthedocs.io/en/stable/readme.html