Rising belief for embedded media

Android WebView is a strong and versatile API that Android builders can use to embed media of their apps, and frequently enhancing its safety and privateness protections is a high precedence for our crew. For instance, embedded media suppliers ought to have the ability to confirm that their media is enjoying in a trusted and protected surroundings. Android app builders and SDK suppliers have already got options for this, together with attestation companies just like the Play Integrity API and Firebase App Examine, which protect consumer privateness whereas enabling builders to confirm their apps’ server requests. Immediately, app builders are in a position to move data from these attestation companies to embedded content material suppliers; nonetheless, the present course of is neither easy nor scalable. That’s why we’re piloting an experimental Android WebView Media Integrity API with choose embedded media suppliers early subsequent yr.

How does this relate to the Internet Atmosphere Integrity API proposal?

We’ve heard your suggestions, and the Internet Atmosphere Integrity proposal is now not being thought-about by the Chrome crew. In distinction, the Android WebView Media Integrity API is narrowly scoped, and solely targets WebViews embedded in apps. It merely extends present performance on Android units which have Google Cellular Providers (GMS) and there are not any plans to supply it past embedded media, similar to streaming video and audio, or past Android WebViews.

What’s the problem with Android WebViews?

The Android WebView API lets app builders show internet pages which embed media, with elevated management over the UI and superior configuration choices to permit a seamless integration within the app. This brings plenty of flexibility, however it may be used as a way for fraud and abuse, as a result of it permits app builders to entry internet content material, and intercept or modify consumer interactions with it. Whereas this has its advantages when apps embed their very own internet content material, it doesn’t prohibit dangerous actors from modifying content material and, by proxy, misrepresenting its supply.

What performance are we bringing to embedded Android WebView media?

The brand new Android WebView Media Integrity API will give embedded media suppliers entry to a tailor-made integrity response that incorporates a tool and app integrity verdict in order that they’ll guarantee their streams are operating in a protected and trusted surroundings, no matter which app retailer the embedding app was put in from. These verdicts are easy, low entropy metadata in regards to the app and gadget and don’t comprise any consumer or gadget identifiers. Not like apps and video games utilizing Play Integrity API, media suppliers won’t get hold of the app’s Play licensing standing and apps can even have the ability to exclude their bundle identify from the decision in the event that they select. Our purpose for the API is to assist maintain a thriving and various ecosystem of media content material in Android apps, and we’re inviting media content material suppliers to specific curiosity in becoming a member of an early entry program early subsequent yr.