ExploreTrendingAnalytics
Nostr Archives
ExploreTrendingAnalytics
GrapheneOS1d ago
We've been talking back and forth with multiple regulators over the past several years about the Play Integrity API to have action taken against it. Unified Attestation is a massive disruption to our efforts and will get in the way of having regulators take action against this. We've also been considering filing a lawsuit against Google over the Play Integrity API. Unlike Google, the companies involved in Unified Attestation don't have massive resources to defend their anti-competitive system.
💬 1 replies

Thread context

Root: 41f0dbc446c5…

Replying to: 867f4d865ed5…

Replies (1)

GrapheneOS1d ago
Android's standard hardware API doesn't require delegating verification to a centralized service. One or more neutral organizations could exist certifying devices and operating systems without providing a centralized API. Those organizations could simply provide signed releases with the roots of trust, revoked keys and operating system key fingerprints. Apps could use multiple different certifying organizations. This is already something Android's hardware attestation API fully supports today.
0000 sats