TL;DR
European digital identity wallets are being developed to help citizens access services and verify their age online. However, these wallets depend on Google’s Play Integrity API and Apple’s Managed Device Attestation, which reinforce the companies' control over their ecosystems.
✦ Why It Matters
Engineers should explore alternatives to proprietary APIs to promote open standards in digital identity solutions.
Key Takeaways
Full Summary
European governments are implementing digital identity wallets for citizens to access services and verify age online. These wallets utilize Google’s Play Integrity API and Apple’s Managed Device Attestation, which are security services that ensure apps run on unaltered hardware.
However, these services also reinforce the dominance of Google and Apple by checking for compliance with their ecosystems, effectively excluding non-Google licensed Android versions. This approach contradicts the Digital Market Act (DMA), which aims to prevent monopolistic practices.
An alternative, Android's Hardware Attestation API, offers hardware-based security checks without enforcing Google’s ecosystem policies. The implications of this dependency on big tech are significant, as it may limit competition and innovation in public services.
Engineers and researchers should consider the impact of such dependencies on future technology development.
Related