Lots of populist European parties are doing the same and are actually gaining votes by blaming everything on the immigrants.

My ELI5 version:

Basically, the ‘Web Environment Integrity’ proposal is a new technique that verifies whether a visitor of a website is actually a human or a bot.

Currently, there are captchas where you need to select all the crosswalks, cars, bicycles, etc. which checks whether you’re a bot, but this can sometimes be bypassed by the bots themselves.

This new ‘Web Environment Integrity’ thing goes as follows:

1. You visit a website
2. Website wants to know whether you’re a human or a bot.
3. Your browser (or the ‘client’) will send request an ‘environment attestation’ from an ‘attester’. This means that your browser (such as Firefox or Chrome) will request approval from some third-party (like Google or something) and the third-party (which is referred to as ‘attester’) will send your browser a message, which basically says ‘This user is a bot’ or ‘This user is a human being’.
4. Your browser receives this message and will then send it to the website, together with the ‘attester public key’. The ‘attester public key’ can be used by the website to verify whether the attester (a.k.a. the third-party checking whether you’re a human or not) is trustworthy and will then check whether the attester says that you’re a human or not.

I hope this clears things up and if I misinterpreted the GitHub explainer, please correct me.

The reason people (rightfully) worry about this, is because it gives attesters A LOT of power. If Google decides they don’t like you, they won’t tell the website that you’re a human. Or maybe, if Google doesn’t like the website you’re trying to visit, they won’t even cooperate with attesting. Lots of things can go wrong here.

No, I disagree. When you ask the average person to show you their private chats, emails and passwords, they will refuse because of privacy.

Instead of not caring about privacy, people prioritize convenience over privacy. Big tech companies such as Google, Meta, Microsoft offer really good, stable products which are mainstream and generally don’t cause problems. At least, Windows 10 is way less troublesome than Linux and it’s easier to use the stock Android with Google instead of installing a custom ROM such as GrapheneOS.

To really push the privacy friendly alternatives towards the mainstream, the alternatives should become more user-friendly, less tech-savvy, and preinstalled.