Mozilla Adds Google-Controlled Verification To Firefox Android

0
1
Open Source Firefox Adopts Google’s Play Integrity API, Triggering FOSS Concerns Over Custom ROM Access
Open Source Firefox Adopts Google’s Play Integrity API, Triggering FOSS Concerns Over Custom ROM Access

Mozilla has integrated Google’s Play Integrity API into Firefox for Android to control access to AI services, prompting concerns among open-source and custom ROM communities over device attestation and platform independence.

Mozilla has added support for Google’s Play Integrity API to Firefox for Android, a move that is raising concerns across the free and open-source software (FOSS) community about potential restrictions on users of custom Android distributions.

According to a resolved issue in Mozilla’s public tracker, a new lib-integrity-googleplay library has been added to Firefox’s Android codebase. Firefox now requests a Play Integrity token and sends it to Mozilla’s Machine Learning Proxy (MLPA) server, where it is used to rate-limit access to server-side AI features.

Mozilla’s stated objective is to ensure that only unmodified Firefox installations downloaded through Google Play and running on Google-certified devices can access its AI compute infrastructure.

While Firefox itself can still be installed and used on rooted or non-certified Android devices, some AI-powered features may not be available on those platforms. The change could affect users of custom ROMs and alternative Android distributions.

The introduction of device attestation has drawn criticism from parts of the FOSS community, including supporters of Android Open Source Project-based platforms such as LineageOS and GrapheneOS, which typically do not include Google Play Services.

Critics argue that the move conflicts with Firefox’s long-standing identity as an open-source, privacy-focused alternative to Google-controlled browsers. Mozilla had previously indicated it was open to exploring less restrictive attestation methods.

Google’s documentation states developers can “call the Integrity API […] to check that user actions and requests are coming from your unmodified app binary” so a “backend server can decide what to do next to prevent abuse, unauthorized access, and attacks.”

The change comes as Mozilla continues expanding its AI initiatives and broader commercial strategy.

LEAVE A REPLY

Please enter your comment!
Please enter your name here