Android privacy improvements break key attestation

This site took too long to answer. You can still read it on the original site — the toolbar below keeps your place in the directory.

Sometimes you want to restrict access to something to a specific set of devices - for instance, you might want your corporate VPN to only be reachable from devices owned by your company. You can't really trust a device that self attests to its identity, for instance by reporting its MAC address or serial number, for a couple of reasons: These aren't fixed - MAC addresses are trivially…

Read on mjg59.dreamwidth.org ↗