Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Android does provide device attestation via Keymaster 3 and has for years: https://source.android.com/security/keystore/attestation

SafetyNet does not specifically give you a device ID, but keystore attestation does. SafetyNet is a higher-level API used to verify you're in a trusted compute environment (which is also sufficient for anti-spam, btw). The keystore attestation API provides everything you need to acquire signed data directly from the HSM with things like device IDs and security trust level baked in.

You need to read up: https://datatracker.ietf.org/doc/draft-bweeks-acme-device-at...



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: