Demystifying attestation

on YouTube ↗14m

" summary

Explains that device attestation gives actionable signals (not vague examples) and recommends using Play Integrity API as the primary tool, noting it runs on Android 4.4+ and returns about five verdicts (versus Key Attestation’s ~50 fields for advanced use). Describes concrete responses developers take: degrade streaming quality, trigger reCAPTCHA, or block access, and highlights the MEETS_STRONG_INTEGRITY result for hardware‑backed boot proofs and how Play Integrity supplants SafetyNet.

AI-written summary · about

" chapters (7)

1. 0:00Introduction to app security
2. 1:19Layers of trust in Android
3. 3:37Device attestation overview
4. 5:22Transition to Play Integrity
5. 7:32Play Integrity API features
6. 10:04Real-world use cases
7. 13:06Implementation and resources

" related talks

• 32mTrust no one - Introducing the Play Integrity APIPietro Maggi · Droidcon London 2023
• 07mIntroducing Play Integrity API developer previewDom Elliott, Solène Maître · Google for Games Developer Summit 2021
• 01h 01mInside Android's SafetyNet AttestationJohn Kozyrakis, Collin Mulliner · Black Hat Europe 2017
• 39mAndroid App Security FundamentalsAndrea Cioccarelli · droidcon Italy 2022
• 30mDroidGuard: A Deep Dive into SafetyNetRomain Thomas · Black Hat Asia 2022
• 25mHarsher Device Checks from SafetyNet AttestationAkihiro Shiota · DroidKaigi 2021
• 10mProtect your game's integrity on Google PlayDom Elliott · Google for Games Developer Summit 2020
• 28mAndroid boot verification to ensure integrity of OS and parti…Prashant Pol · DroidKaigi 2023