Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New IwaKeyDistribution folder in version 135.0.7049.41-1.1 #438

Open
LingamYoni opened this issue Apr 5, 2025 · 0 comments
Open

New IwaKeyDistribution folder in version 135.0.7049.41-1.1 #438

LingamYoni opened this issue Apr 5, 2025 · 0 comments

Comments

@LingamYoni
Copy link

In ungoogled-chromium version 135.0.7049.41-1.1, a new folder named IwaKeyDistribution has appeared in the browser's distribution/profile directory. It contains two files: iwa-key-distribution.pb and manifest.json. This folder was not present in previous versions I've used.

Based on the naming (Iwa potentially for "Integrity Web Attestation"?) and recent Chromium developments, this seems possibly related to the controversial Web Environment Integrity (WEI) proposal or a similar browser/environment attestation mechanism.

Given Ungoogled Chromium's goals of removing Google integration and enhancing user privacy/control, the presence of a component potentially related to WEI is concerning.

Could someone please clarify:

  1. What is the exact purpose of this IwaKeyDistribution component?
  2. Is it active in the current build, or is it an inert remnant from upstream Chromium?
  3. Are there plans to patch this out or disable it in future Ungoogled Chromium builds?
  4. Can this folder and its contents be safely deleted manually without breaking browser functionality (assuming one doesn't want any potential WEI-like features)?

Thanks for any insights on this!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant