> What you describe is not in conflict with the Apple/Google proposed solutions. I didn't mean to suggest that it was. Rather, I was objecting to your earlier

> What you describe is not in conflict with the Apple/Google proposed solutions. I didn't mean to suggest that it was. Rather, I was objecting to your earlier claim that there must be an internal and proprietary Apple API used to validate diagnosis keys and that only Apple could mitigate the abuse risk. > As long as Google/Apple aggregate the diagnosis keys across multiple servers There's nothing that inherently requires Google or Apple involvement here (although realistically I assume they will end up providing the majority of the servers as a service). All implementations and services including the framework, any apps, and the data server can be done completely independently (if desired) and still interoperate with any Apple or Google provided implementations. That's what's so great about a decentralized system.