Play Integrity API: Difference between revisions

Content deleted Content added
No edit summary
No edit summary
Line 1:
{{Short description|Security module for computing apps}}
The '''SafetyNet API''' is a security feature of [[Google Play Services]] to provide security sensitive applications verification that the integrity of the device is not compromised, using an [[application programming interface]] (API).<ref>{{Cite web|last=Hoffman|first=Chris|title=SafetyNet Explained: Why Android Pay and Other Apps Don't Work on Rooted Devices|url=https://www.howtogeek.com/241012/safetynet-explained-why-android-pay-and-other-apps-dont-work-on-rooted-devices/|access-date=2021-09-11|website=How-To Geek|language=en-US}}</ref><ref>{{Cite web|date=2020-06-29|title=Google's dreaded SafetyNet hardware check has been spotted in the wild|url=https://www.androidpolice.com/2020/06/29/googles-dreaded-safetynet-hardware-check-has-been-spotted-in-the-wild/|access-date=2021-09-11|website=Android Police|language=en-US}}</ref><ref>{{Cite journal|last1=Ibrahim|first1=Muhammad|last2=Imran|first2=Abdullah|last3=Bianchi|first3=Antonio|date=2021-06-24|title=SafetyNOT: on the usage of the SafetyNet attestation API in Android|journal=Proceedings of the 19th Annual International Conference on Mobile Systems, Applications, and Services|language=en|___location=Virtual Event Wisconsin|publisher=ACM|pages=150–162|doi=10.1145/3458864.3466627|isbn=978-1-4503-8443-8|doi-access=free}}</ref>
In practice, non-official ROMs such as LineageOS fail the hardware attestation and thus restrict the user from employingenjoying a pure androidAndroid implementation (without the Google Services) while being able to use third-party apps (mainly banking).
Due to this, some consider this a monopolistic practice deterring the entrance of competing mobile operating systems in the market. <ref>{{cite web |last1=Schwab |first1=Andreas |last2=Echeverria |first2=Pablo Arias |title=Time to restore fairness and contestability in digital markets |url=https://www.euractiv.com/section/digital/opinion/time-to-restore-fairness-and-contestability-in-digital-markets/ |website=www.euractiv.com |date=24 March 2022}}</ref>
 
The SafetyNet Attestation API (one of the four APIs under the SafetyNet umbrella) has been deprecated<ref>{{Cite web|title=SafetyNet Deprecation Timeline|url=https://g.co/play/safetynet-timeline|website=Android Developers|language=en-US}}</ref> by Google and will be replaced with Play Integrity API soon<ref>{{cite web |title=Migrating from the SafetyNet Attestation API {{!}} Google Play |url=https://developer.android.com/google/play/integrity/migrate |website=Android Developers |language=en}}</ref>. In this new scenario, the API is moved to the proprietary ecosystem of Google Services, making third-party apps dependent on it and unable to run on a totally free Android environment (AOSP).
 
== References ==