News for hackers. Stuff that matters.
Re:“It’s time for Apple to fix texting” by dcow on Wednesday August 10, 2022 @04:33AM (#32409261)
Android does provide device attestation via Keymaster 3 and has for years: https://source.android.com/security/keystore/attestation

SafetyNet does not specifically give you a device ID, but keystore attestation does. SafetyNet is a higher-level API used to verify you're in a trusted compute environment (which is also sufficient for anti-spam, btw). The keystore attestation API provides everything you need to acquire signed data directly from the HSM with things like device IDs and security trust level baked in.

You need to read up: https://datatracker.ietf.org/doc/draft-bweeks-acme-device-at...

There are no comments on this comment yet.