3 ms·

On the iOS side you have to apply to Apple for the entitlement to use the API. > This entitlement is limited to government health organizations or developers w

by jmull 6y ago

On the iOS side you have to apply to Apple for the entitlement to use the API. > This entitlement is limited to government health organizations or developers who have been endorsed and approved by a government health organization. Please make sure to read the Exposure Notification documentation before submitting your information. And there’s a form where you provide the relevant information. Presumably there is some mechanism to validate this. I don’t know about the Google side.

jedberg 6y ago
I'm not super familiar with iOS app development. Do you need to get entitlement just to test the API? Or only to publish an app using that API? Because if you can test with any API you want, what stops you from making an app in your dev environment and triggering the API?
- numpad0 6y ago
  are you saying “login screen exposed to web means it’s compromised”
- rimliu 6y ago
  If your app is trying to use an API needing special entitlement (without having it) it will be not accepted to the App Store.
asiachick 6y ago
So it sounds like Apple (and Google) just made it very clear to every government where to ask to spy and by enabling the spying there's no more denying "we can't do that" since they clearly are doing it. I can't imagine say, China, not demanding to be able to use this API for whatever purposes they want and if Apple/Google says no they'll just say "fine, get out of China". I also can't imagine the US government and/or state and local police won't also come knocking eventually. Of course we should do what's right for the COVID issue but I think the is clearly a foot in the door moment.
- jmull 6y ago
  > where to ask to spy ... clearly a foot in the door moment. No. Not sure what people aren't getting about this, but governments have always been able to pressure Apple and Google (and they've been doing it all along). The existence of this API changes nothing. And when governments do pressure Apple and Google, it isn't for this API, BTW. They want much more useful and immediate information than this API provides.

by jmull 6y ago

jedberg 6y ago

I'm not super familiar with iOS app development. Do you need to get entitlement just to test the API? Or only to publish an app using that API? Because if you can test with any API you want, what stops you from making an app in your dev environment and triggering the API?

numpad0 6y ago
are you saying “login screen exposed to web means it’s compromised”
rimliu 6y ago
If your app is trying to use an API needing special entitlement (without having it) it will be not accepted to the App Store.

asiachick 6y ago

So it sounds like Apple (and Google) just made it very clear to every government where to ask to spy and by enabling the spying there's no more denying "we can't do that" since they clearly are doing it. I can't imagine say, China, not demanding to be able to use this API for whatever purposes they want and if Apple/Google says no they'll just say "fine, get out of China". I also can't imagine the US government and/or state and local police won't also come knocking eventually. Of course we should do what's right for the COVID issue but I think the is clearly a foot in the door moment.

jmull 6y ago
> where to ask to spy ... clearly a foot in the door moment. No. Not sure what people aren't getting about this, but governments have always been able to pressure Apple and Google (and they've been doing it all along). The existence of this API changes nothing. And when governments do pressure Apple and Google, it isn't for this API, BTW. They want much more useful and immediate information than this API provides.