惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Spread Privacy
Spread Privacy
K
Kaspersky official blog
Application and Cybersecurity Blog
Application and Cybersecurity Blog
Forbes - Security
Forbes - Security
Hacker News - Newest:
Hacker News - Newest: "LLM"
The Last Watchdog
The Last Watchdog
SecWiki News
SecWiki News
Attack and Defense Labs
Attack and Defense Labs
Google DeepMind News
Google DeepMind News
Security Archives - TechRepublic
Security Archives - TechRepublic
S
Secure Thoughts
WordPress大学
WordPress大学
Microsoft Security Blog
Microsoft Security Blog
P
Proofpoint News Feed
云风的 BLOG
云风的 BLOG
V
Visual Studio Blog
Security Latest
Security Latest
TaoSecurity Blog
TaoSecurity Blog
Cyberwarzone
Cyberwarzone
S
SegmentFault 最新的问题
Cloudbric
Cloudbric
aimingoo的专栏
aimingoo的专栏
S
Schneier on Security
N
Netflix TechBlog - Medium
MyScale Blog
MyScale Blog
T
The Blog of Author Tim Ferriss
H
Hacker News: Front Page
C
Cybersecurity and Infrastructure Security Agency CISA
小众软件
小众软件
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
AWS News Blog
AWS News Blog
AI
AI
G
GRAHAM CLULEY
IT之家
IT之家
P
Privacy & Cybersecurity Law Blog
L
Lohrmann on Cybersecurity
Last Week in AI
Last Week in AI
D
Docker
Recent Announcements
Recent Announcements
O
OpenAI News
T
Threat Research - Cisco Blogs
GbyAI
GbyAI
S
Security @ Cisco Blogs
T
Troy Hunt's Blog
C
Check Point Blog
博客园 - 三生石上(FineUI控件)
A
About on SuperTechFans
The Cloudflare Blog
阮一峰的网络日志
阮一峰的网络日志
N
News and Events Feed by Topic

Open Web Advocacy RSS Feed

28% Faster: The Blink Prototype That Shows Why Apple 28%高速化: AppleのiOSブラウザエンジン禁止措置を終わらせるべき理由を示すBlinkプロトタイプ - Open Web Advocacy 28% Faster: The Blink Prototype That Shows Why Apple Open Letter: Why the CMA Must Enforce the DMCCA - Open Web Advocacy Open Letter: Why the CMA Must Enforce the DMCCA - Open Web Advocacy Open Letter: Why the CMA Must Enforce the DMCCA - Open Web Advocacy The Digital Markets Act Is Delivering Real Wins, But Not Yet for Browser Engines - Open Web Advocacy The Digital Markets Act Is Delivering Real Wins, But Not Yet for Browser Engines - Open Web Advocacy The Digital Markets Act Is Delivering Real Wins, But Not Yet for Browser Engines - Open Web Advocacy Our Submission to the CMA on Apple’s iOS Interoperability Commitments - Open Web Advocacy Our Submission to the CMA on Apple’s iOS Interoperability Commitments - Open Web Advocacy Our Submission to the CMA on Apple’s iOS Interoperability Commitments - Open Web Advocacy Q&A with Simonetta Vezzoso: The Open Web, Apple, and the DMA - Open Web Advocacy Q&A with Simonetta Vezzoso: The Open Web, Apple, and the DMA - Open Web Advocacy Q&A with Simonetta Vezzoso: The Open Web, Apple, and the DMA - Open Web Advocacy Google Backs Down: Will Grant Hotseat in EU Browser Choice Screen - Open Web Advocacy Google Backs Down: Will Grant Hotseat in EU Browser Choice Screen - Open Web Advocacy Google Backs Down: Will Grant Hotseat in EU Browser Choice Screen - Open Web Advocacy OWA on RedMonk: Why the Mobile Web Still Can’t Compete with Native Apps, and How to Fix It! - Open Web Advocacy OWA on RedMonk: Why the Mobile Web Still Can’t Compete with Native Apps, and How to Fix It! - Open Web Advocacy OWA on RedMonk: Why the Mobile Web Still Can’t Compete with Native Apps, and How to Fix It! - Open Web Advocacy Apple’s Interoperability Commitments to the UK’s CMA Promise Nothing - Open Web Advocacy Apple’s Interoperability Commitments to the UK’s CMA Promise Nothing - Open Web Advocacy Apple’s Interoperability Commitments to the UK’s CMA Promise Nothing - Open Web Advocacy How Apple’s Key Tactic Could Prevent Japan’s Smartphone Act from Improving Browser Competition - Open Web Advocacy Appleの主要な戦術が、日本のスマホ法によるブラウザ競争の改善を阻む可能性について - Open Web Advocacy How Apple’s Key Tactic Could Prevent Japan’s Smartphone Act from Improving Browser Competition - Open Web Advocacy Open Web Advocacy 2025 in Review - Open Web Advocacy Open Web Advocacy 2025 in Review - Open Web Advocacy Open Web Advocacy 2025 in Review - Open Web Advocacy Tim Berners-Lee On Apple’s Browser Engine Ban and Web Apps - Open Web Advocacy Tim Berners-Lee On Apple’s Browser Engine Ban and Web Apps - Open Web Advocacy Tim Berners-Lee On Apple’s Browser Engine Ban and Web Apps - Open Web Advocacy What Apple’s UK Strategic Market Status Designation means for Browsers and Web Apps - Open Web Advocacy What Apple’s UK Strategic Market Status Designation means for Browsers and Web Apps - Open Web Advocacy What Apple’s UK Strategic Market Status Designation means for Browsers and Web Apps - Open Web Advocacy OWA at the EU Parliament DMA Working Group - Open Web Advocacy OWA at the EU Parliament DMA Working Group - Open Web Advocacy OWA at the EU Parliament DMA Working Group - Open Web Advocacy Can Perplexity Afford to Fund the Web? The $34.5 Billion-Dollar Question - Open Web Advocacy Can Perplexity Afford to Fund the Web? The $34.5 Billion-Dollar Question - Open Web Advocacy Can Perplexity Afford to Fund the Web? The $34.5 Billion-Dollar Question - Open Web Advocacy Japan: Apple Must Lift Browser Engine Ban by December - Open Web Advocacy Japan: Apple Must Lift Engine Ban by December - Open Web Advocacy Japan: Apple Must Lift Engine Ban by December - Open Web Advocacy UK Regulator Flags Apple’s iOS Browser Engine Ban in Draft SMS Designation - Open Web Advocacy UK Regulator Flags Apple’s iOS Browser Engine Ban in Draft SMS Designation - Open Web Advocacy UK Regulator Flags Apple’s iOS Browser Engine Ban in Draft SMS Designation - Open Web Advocacy Apple Apple Apple Google Google Google Balancing Security and Fair Competition - Open Web Advocacy Balancing Security and Fair Competition - Open Web Advocacy Balancing Security and Fair Competition - Open Web Advocacy Industry Voices Caution Against DOJ’s Plan to Force Sale Of Chrome - Open Web Advocacy Industry Voices Caution Against DOJ’s Plan to Force Sale Of Chrome - Open Web Advocacy Industry Voices Caution Against DOJ’s Plan to Force Sale Of Chrome - Open Web Advocacy Is It Worth Killing Mozilla to Shave Off Less Than 1% From Google’s Market Share? - Open Web Advocacy Is It Worth Killing Mozilla to Shave Off Less Than 1% From Google’s Market Share? - Open Web Advocacy Is It Worth Killing Mozilla to Shave Off Less Than 1% From Google’s Market Share? - Open Web Advocacy Break Google’s Search Monopoly without Breaking the Web - Open Web Advocacy Break Google’s Search Monopoly without Breaking the Web - Open Web Advocacy Break Google’s Search Monopoly without Breaking the Web - Open Web Advocacy UK Regulator UK Regulator UK Regulator SLAP and FLOP: Apple SLAP and FLOP: Apple SLAP and FLOP: Apple Digital Markets Act: Europe’s Digital Competitiveness at Stake - Open Web Advocacy Digital Markets Act: Europe’s Digital Competitiveness at Stake - Open Web Advocacy Digital Markets Act: Europe’s Digital Competitiveness at Stake - Open Web Advocacy UK Launches Investigation into Apple and Google under the DMCC - Open Web Advocacy UK Launches Investigation into Apple and Google under the DMCC - Open Web Advocacy UK Launches Investigation into Apple and Google under the DMCC - Open Web Advocacy Open Web Advocacy 2024 in Review - Open Web Advocacy Open Web Advocacy 2024 in Review - Open Web Advocacy Open Web Advocacy 2024 in Review - Open Web Advocacy iOS age restriction blocks all browsers except Safari, breaks choice screen - Open Web Advocacy iOS age restriction blocks all browsers except Safari, breaks choice screen - Open Web Advocacy iOS age restriction blocks all browsers except Safari, breaks choice screen - Open Web Advocacy Apple implements six of OWA Apple implements six of OWA Apple implements six of OWA It It It Interop 2025 must drop secret vetos - Open Web Advocacy Interop 2025 must drop secret vetos - Open Web Advocacy Interop 2025 must drop secret vetos - Open Web Advocacy Stuart Langridge: The Mazy Web - Open Web Advocacy Stuart Langridge: The Mazy Web - Open Web Advocacy Stuart Langridge: The Mazy Web - Open Web Advocacy Webventures: An Abridged History of Safari Showstoppers - Open Web Advocacy Webventures: An Abridged History of Safari Showstoppers - Open Web Advocacy Webventures: An Abridged History of Safari Showstoppers - Open Web Advocacy Google must share the ability to install Web Apps in Android - Open Web Advocacy
Apple DMA Review - Open Web Advocacy
2024-06-21 · via Open Web Advocacy RSS Feed

The Digital Markets Act (DMA) aims to restore contestability, interoperability, choice and fairness back to digital markets in the EU. These fundamental properties of an effectively functioning digital market have been eroded by the extreme power gatekeepers wield via their control of “core platform services”.

The lack of competition on mobile ecosystems is, at its heart, a structural one. Gatekeepers wield vast power due to the security model that these devices are built on. Traditionally, on operating systems such as Windows, macOS and Linux, users can install any application they want, with no interaction from the operating system gatekeeper, either by the business or the end user. Users can then grant these programs the ability to do anything they desire.

Locking down what applications can do, such as restricting which APIs they can access behind user permissions, is not by itself anti-competitive and can bring legitimate security advantages. However, the manner in which it has been implemented on mobile devices is both self-serving and in its current form, significantly damages competition.

This damage surfaces in several forms:

First, the gatekeeper can control what is allowed to be installed on devices they have already sold to consumers, often for a significant profit. They utilize this device-level control to demand a 30% cut of all third-party software that the consumer installs, not on merit, but simply because they control the only mechanisms available to businesses to release that software, and can further block or hinder the consumer from using or acquiring services outside of their app store.

The second is more subtle. In order to deliver their “native” apps to consumers on Android or iOS, developers must create custom applications in specific programming languages for each individual platform. Typically, companies will require separate development teams for each OS. This not only multiplies development and maintenance cost, but puts in place an invisible barrier to interoperability. Even the built up expertise for creating software for a specific platform provides significant lock-in advantages to the platform’s gatekeeper.

Finally, even if a developer has no desire to interact with the gatekeeper, they are forced into a commercial and legally binding relationship with them. This is due to the fact that the gatekeeper inserts itself between the customer and these third party developers. With smartphones now 15 years old, this may seem normal to us now, but imagine if Microsoft demanded that every software provider signed an onerous contract with them or be barred from releasing a product on Windows. What would have been unacceptable, anti-competitive behavior to both consumers, businesses and regulators on desktop, has been tolerated on mobile simply because these computers were considered a “new” category.

Mobile devices are just small computers whose primary input is touch, there is no sacred or magical property that means they have to run on a proprietary app store model. Nothing is stopping mobile computers running on the open model that desktop computers run on, just as there is nothing stopping a desktop computer running the app store model. Inertia and great profits are however powerful forces. Between them, Apple and Google have created a powerful and entrenched duopoly.

Even with the DMA forcing Apple to open up the ecosystem to competition, Apple is still inserting themselves front and center between consumers and app developers. They insist all developers for iOS/iPadOS (including developers who have no intention of using their app store) pay them $100 per year, that they sign the full Apple developer program contract and submit themselves to what is effectively app store review (although nominally locked to security). Worse, they are attaching significant recurring penalty fees to developers who dare to make their software available outside of Apple’s app store. Apple is using every tool at their disposal to dissuade developers from leaving their app store and to undermine the goals of the DMA.

Apple's key excuse to impose this control is security. Apple's argument is, in essence, that only they can be trusted to vet what consumers are allowed to install on their devices. All third parties must submit to their review.

What is needed is a way to securely run interoperable and capable software across all operating systems. Luckily, such a solution already exists and is not only thriving on open desktop platforms but is dominating, and that dominance is growing every year. The solution is of course, the Web and more specifically Web Apps. Today, more than 60% of users' time on desktop is done using web technologies, and that looks set to only grow.

Web Apps have a number of properties that allow them to solve this critical problem. They are run in the security of the browser's sandbox, which even Apple admits is “orders of magnitude more stringent than the sandbox for native iOS apps.”. They are truly interoperable between operating systems. They don't require developers to sign contracts with any of the OS gatekeepers. They are capable of incredible things and 90% of the apps on your phone could be written as one today.

So why aren't they thriving on mobile? The simple answer to this question is lack of browser competition on iOS and active hostility by Apple towards effective Web App support, both by their own browser and by their OS. Apple's own browser faces no competition on iOS, as they have effectively barred the other browsers from competing by prohibiting them from using or modifying their engines, the core part of what allows browser vendors to differentiate in stability, features, security and privacy.

The DMA explicitly sets out to right this wrong by mandating that gatekeepers can no longer enact such a ban:

In particular, each browser is built on a web browser engine, which is responsible for key browser functionality such as speed, reliability and web compatibility. When gatekeepers operate and impose web browser engines, they are in a position to determine the functionality and standards that will apply not only to their own web browsers, but also to competing web browsers and, in turn, to >web software applications. Gatekeepers should therefore not use their position to require their dependent business users to use any of the services provided together with, or in support of, core platform services by the gatekeeper itself as part of the provision of services or products by those business users. Digital Markets Act - Recital 43

The intent stated for this in the DMA is to prevent gatekeepers from dictating the speed, stability, compatibility and feature set of “web software applications”.

Apple has announced new rules that would, at first glance, allow browser vendors to port their real browsers to iOS. However, on closer inspection, this is a mirage. Instead Apple appears intent on making it “as painful as possible” for browser vendors to port their engines to iOS/iPadOS. As we will outline in our paper, Apple's current proposal falls far short of compliance. Apple is not only undermining browser competition on iOS, but appears to be actively attempting to prevent the growth of an entire open and interoperable ecosystem that could feasibly supplant and replace their app store model.

Apple have seen the Web as a threat to their app store as far back as 2011, when Philip Schiller internally sent an email to Eddie Cue titled “HTML5 poses a threat to both Flash and the App Store”.

Food for thought: Do we think our 30/70% split will last forever? While I am a staunch supporter of the 30/70% split and keeping it simple and consistent across our stores, I don’t think 30/70 will last unchanged forever. I think someday we will see a challenge from another platform or a web based solution to want to adjust our model. Phil Schiller - Apple Upper Management

This attitude appears not to have changed. Faced with the genuine possibility of third- party browsers effectively powering Web Apps, Apple's first instinct appears to have been to remove Web Apps support entirely with no notice to either businesses or consumers. Luckily, under significant pressure, Apple backed down from this particular stunt at the last moment.

Apple is very explicit in its public statement that they initially planned to remove the functionality as the DMA would force them to share it with third-party browsers. Even in their statement backing down, they make it clear they do not intend to allow third-party browsers that use their own engine to be able to install and manage Web Apps. In both statements, Apple cites "security" as the reason for their decisions.

Unfortunately for Apple, it has been unable to prove that Safari or WebKit are actually more secure than its competitors. When obligated by the UK’s Competition and Markets Authority to provide evidence to back up its assertion that WebKit was more secure than Blink or Gecko, Apple failed to do so.

... the evidence that we have seen to date does not suggest that there are material differences in the security performance of WebKit and alternative browser engines.

Overall, the evidence we have received to date does not suggest that Apple's WebKit restriction allows for quicker and more effective response to security threats for dedicated browser apps on iOS. UK CMA - Interim Report into Mobile Ecosystems

Apple's actions not only hurt the Web ecosystem, third-party businesses (be they browser vendors or software developers), but also make their devices worse for their own consumers. By depriving their consumers of the choice and competition that fair and effective browser and Web App competition would bring, they are worsening the functionality, interoperability, stability, security, privacy, and price of services on their devices.

A reasonable person might argue Why would Apple make their own devices worse, surely better devices means more hardware sales? This behavior comes, however, with key advantages for Apple, even if they harm Apple's own consumers.

Critically, service revenue is of growing importance for Apple as their hardware sales have peaked and are declining. Apple has not had a “hit” new product for 14 years, namely the iPad, and, if you are being generous, 9 years for the Apple Watch. It does not currently seem likely that Apple’s VR/AR headset will have any significant impact on Apple’s overall hardware sales.

The UK regulator cites two incentives: protecting their app store revenue from competition from Web Apps, and protecting their Google search deal from competition from third-party browsers.

Apple receives significant revenue from Google by setting Google Search as the default search engine on Safari, and therefore benefits financially from high usage of Safari. [...] The WebKit restriction may help to entrench this position by limiting the scope for other browsers on iOS to differentiate themselves from Safari [...] As a result, it is less likely that users will choose other browsers over Safari, which in turn secures Apple’s revenues from Google. [...] Apple generates revenue through its App Store, both by charging developers for access to the App Store and by taking a commission for payments made via Apple IAP. Apple therefore benefits from higher usage of native apps on iOS. By requiring all browsers on iOS to use the WebKit browser engine, Apple is able to exert control over the maximum functionality of all browsers on iOS and, as a consequence, hold up the development and use of web apps. This limits the competitive constraint that web apps pose on native apps, which in turn protects and benefits Apple’s App Store revenues. UK CMA - Interim Report into Mobile Ecosystems
(emphasis added)

These two revenue streams are vast, even for a company of Apple’s size. Apple collected $85 billion USD in App Store fees in 2022, of which it keeps approximately 30%. Apple reportedly receives $18-20 billion USD a year from their Google Search engine deal, accounting for 14-16 percent of Apple's annual operating profits.

A third and interesting incentive the CMA does not cite, but which the US's Department of Justice does, is that this behavior greatly weakens the interoperability of Apple's devices, making it harder for consumers to switch or multi-home. It also greatly raises the barriers of entry for new mobile operating system entrants by depriving them of a library of interoperable apps.

Apple has long understood how middleware can help promote competition and its myriad benefits, including increased innovation and output, by increasing scale and interoperability. [...] In the context of smartphones, examples of middleware include internet browsers, internet or cloud-based apps, super apps, and smartwatches, among other products and services. [...] Apple has limited the capabilities of third-party iOS web browsers, including by requiring that they use Apple’s browser engine, WebKit. [...] Apple has sole discretion to review and approve all apps and app updates. Apple selectively exercises that discretion to its own benefit, deviating from or changing its guidelines when it suits Apple’s interests and allowing Apple executives to control app reviews and decide whether to approve individual apps or updates. Apple often enforces its App Store rules arbitrarily. And it frequently uses App Store rules and restrictions to penalize and restrict developers that take advantage of technologies that threaten to disrupt, disintermediate, compete with, or erode Apple’s monopoly power. DOJ Complaint against Apple
(emphasis added)

Interoperability via middleware would reduce lock-in for Apple’s devices. Lock-in is a clear reason for Apple to block interoperability, as can be seen in this email exchange where Apple executives dismiss the idea of bringing iMessage to Android.

The #1 most difficult [reason] to leave the Apple universe app is iMessage ... iMessage amounts to serious lock-in Unnamed Apple Employee

iMessage on Android would simply serve to remove [an] obstacle to iPhone families giving their kids Android phones ... moving iMessage to Android will hurt us more than help us, this email illustrates why. Craig Federighi - Apple's Senior Vice President of Software Engineering

The DMA has the power to fix all of these underlying issues and unleash a powerful, open, interoperable and secure competitor to not only Apple's app store but also Google's. Lack of contestability for mobile app stores and mobile operating systems is a key concern for the DMA that viable Web Apps solve.

This will also remove a heavy burden from new entrants into the operating system market; lack of apps. No longer will developers need to develop custom apps for each operating system, any operating system with good web app support and browser competition will support all web apps automatically. Web Apps support operating systems that developers have not even heard of. The impact of allowing them to compete fairly on mobile will be profound.

We request the Commission open a proceeding into Apple and investigate what we allege is severe and deliberate non-compliance. The number of ways that Apple is not complying is so myriad that we, recognising that the commision does not have infinite resources to pursue all of them simultaneously, have split them into three tranches of remedies.

Some remedies require time and/or pre-requisite remedies in order to be effective. Remedies in this document are ordered to ensure that either competitive benefits are delivered earlier or to unlock future remedies. In this way, we propose a program of continual improvement in the competitive landscape, delivering wins at every step along the path.

While we have attempted to be comprehensive, it is possible, and perhaps even likely, that there will be infringements that we have not included or are not yet aware of.

Our proposed remedies include:

  • Restricting Apple's API contract for browsers down to strictly necessary, proportionate and justified security measures.
  • Make clear what the security measures are for third party browsers using their own engine by publishing them in a single up-to-date document.
  • Removing any App Store rule that would prevent third party browsers from competing fairly.
  • Allow browser vendors to keep their existing EU consumers when switching to use their own engine.
  • Removing the special placement of Safari.
  • Making Safari uninstallable.
  • Implementing Install Prompts in iOS Safari for Web Apps.
  • Allowing Browser Vendors and Developers to be able to test their browsers and web software outside the EU.
  • Allowing Browsers using their own engine to install and manage Web Apps.
  • Make notarization a fast and automatic process, as on macOS.
  • Allow direct browser installation independently from Apple’s app store.
  • Allow users to switch to different distribution methods of a native app and allow developers to promote that option to the user.
  • Don't break third party browsers for EU residents who are traveling.
  • Opt-Into Rights contract should be removed.
  • Core Technology Fee should be removed.
  • Apple should publish a new more detailed compliance plan.

Apple is obligated under Articles 5(7), 6(3), 6(4) and 6(7) to fix each of the above issues. Apple has failed to achieve effective compliance with these obligations contrary to Article 13(3). Further Apple has taken numerous and significant steps that obstruct and undermine it in contravention of Article 13(4). Apple has introduced conditions and restrictions on DMA-conferred rights that have no legal basis in the DMA and gone far beyond the restrictions that the DMA does allow by introducing rules that have no basis in security or that are not justified, strictly necessary or proportionate.

Any intervention that the Commission makes will have global ramifications. Regulators around the world are carefully watching the implementation of the DMA as they plan their own regulatory regimes. Already Japan has become the second jurisdiction in the world to explicitly prohibit banning browser engines. Australia, India, Korea and Brazil are all planning on implementing their own versions of the DMA. The UK has just passed the Digital Markets, Competition and Consumers Bill that grants their regulator great power to enforce codes of conduct against tech giants.

Successful resolution of these issues have an exceptional chance of becoming de facto global, as no jurisdiction will want to miss out on clear benefits being enjoyed by EU consumers. However, if Apple manages to successfully avoid complying with the DMA, these problems could persist indefinitely.

We urge the Commission to enforce the DMA and obligate Apple to allow browsers and Web Apps to compete fairly and effectively on their mobile ecosystem. This will unlock contestability, fairness and interoperability. Companies will then have to compete for users on merit, not via lock-in or control over operating systems. Consumers will benefit from choice, better quality and cheaper software, interoperability, and the genuine ability to multihome across devices and operating systems offered by different companies.

These changes can finally fix a mobile ecosystem that has been structurally broken, and artificially hindered, for more than a decade.

That was the introduction to our report. You can read the full far more detailed report here.