Field notes / Journal / Build notes

Writing

Posts tagged #Play Integrity · 2 posts. All writing

Search posts

Type

Topic

2 posts

Archive

2026

EngineeringNovember 6, 20263 min read

Android Play Integrity request binding and backend verdict policy

What requestHash protects, what the server must verify, and why an integrity verdict is not a substitute for authorization.

#Android #Kotlin #Play Integrity #Mobile Security

EngineeringNovember 6, 20264 min read

Device integrity is not authorization: an App Attest and Play Integrity decision model

A valid App Attest or Play Integrity result cannot authorize a user. I walk through the server decisions separately and test them with synthetic inputs.

#iOS #Android #Mobile Security #App Attest

Prefer a feed? Subscribe via RSS.