Play Integrity API
The SafetyNet API is a security feature of Google Play Services to provide security sensitive applications verification that the integrity of the device is not compromised, using an application programming interface (API).[1][2][3] In practice, non-official ROMs such as LineageOS fail the hardware attestation and thus restrict the user from employing a pure android implementation without the Google Services while being able to use third-party apps (mainly banking). Due to this, some consider this a monopolistic practice deterring the entrance of competing mobile operating systems in the market. [4]
SafetyNet API is deprecated by Google and will be replaced with Play Integrity soon.[5] In this new scenario, the API is moved to the proprietary ecosystem of Google Services, making third-party apps dependent on it and unable to run on a totally free Android environment (AOSP).
References
- ^ Hoffman, Chris. "SafetyNet Explained: Why Android Pay and Other Apps Don't Work on Rooted Devices". How-To Geek. Retrieved 2021-09-11.
- ^ "Google's dreaded SafetyNet hardware check has been spotted in the wild". Android Police. 2020-06-29. Retrieved 2021-09-11.
- ^ Ibrahim, Muhammad; Imran, Abdullah; Bianchi, Antonio (2021-06-24). "SafetyNOT: on the usage of the SafetyNet attestation API in Android". Proceedings of the 19th Annual International Conference on Mobile Systems, Applications, and Services. Virtual Event Wisconsin: ACM: 150–162. doi:10.1145/3458864.3466627. ISBN 978-1-4503-8443-8.
- ^ Schwab, Andreas; Echeverria, Pablo Arias (24 March 2022). "Time to restore fairness and contestability in digital markets". www.euractiv.com.
- ^ "Migrating from the SafetyNet Attestation API | Google Play". Android Developers.