News for hackers. Stuff that matters.
Re:Zero Data App by bluesign on Saturday March 06, 2021 @07:37AM (#26366979)
I am little confused.

It is write-only from vendor side seems like vendor will sign something for authenticity. Something like token signature.

So it has to have my "pod ID", otherwise I can replay this data, with another "pod ID".

Ofc netflix or your pod, can rotate this ID, but that also requires netflix etc to constantly sign new IDs.

Re:Zero Data App by jefftk on Saturday March 06, 2021 @08:10AM (#26367102)
I think you could do something like this with web.dev/trust-tokens (same idea as PrivacyPass), where the server can vouch for you without saying who you are.