Apple: Using alternative browser engines in the European Union
Apple's iOS 17.4 enables EU apps to use alternative browser engines, requiring developers to meet strict security and privacy standards to enhance user choice and competition among browsers.
Read original articleApple has introduced new capabilities in iOS 17.4 and later that allow apps in the European Union to utilize alternative browser engines beyond WebKit. This change is aimed at enhancing user choice and competition among browser applications. Developers must apply for either the Web Browser Engine Entitlement or the Embedded Browser Engine Entitlement, depending on whether they are creating a dedicated browser app or providing in-app browsing features. To qualify, apps must meet specific functional, security, and privacy requirements, including passing industry-standard test suites and committing to secure development practices. Apple emphasizes the importance of user safety, requiring developers to implement timely security updates and maintain a vulnerability disclosure policy. The Embedded Browser Engine Entitlement allows apps to embed alternative engines for in-app browsing, provided they adhere to similar requirements. Developers must also ensure that their apps do not share sensitive user data without consent and must block third-party cookies by default. Overall, these measures aim to foster a secure and competitive environment for browser applications within the EU.
- Apple allows alternative browser engines in iOS apps for EU users.
- Developers must apply for specific entitlements to use these engines.
- Strict security and privacy requirements are mandated for compliance.
- Timely security updates and vulnerability management are essential.
- The initiative aims to enhance user choice and competition in browser applications.
Related
European Union regulators accuse Apple of breaching the bloc's tech rules
EU accuses Apple of Digital Markets Act violations for restricting App Store alternatives and charging high developer fees. New probe initiated on contractual terms. Apple defends changes, faces potential fines up to 10%.
Apple Disables WebKit's JIT in Lockdown Mode, & BrowserEngineKit Is Restricted
Apple has disabled WebKit's JIT in Lockdown Mode for enhanced security, aligning with EU's DMA. BrowserEngineKit enables secure JIT compilation, balancing performance and safety, requiring authorized developers for alternative browser engines.
Apple Disables WebKit's JIT in Lockdown Mode
Apple disables WebKit's JIT in Lockdown Mode for security, affecting web browsing speed. BrowserEngineKit complies with EU's DMA, allowing third-party engines while ensuring security. Apple balances compliance, security, and performance.
Apple announces new fees for apps in the EU that link to the web for purchases
Apple has revised its fee structure for EU apps linking to external purchases, introducing a two-tiered system with lower fees for developers, while exempting existing subscriptions from these changes.
Apple Revises DMA Compliance
Apple updated its compliance plan for the EU's Digital Markets Act, allowing developers to include external links in apps and introducing a dual fee structure to lower costs while addressing regulatory scrutiny.
>> You must do the following:
>>> Use memory-safe programming languages, or features that improve memory safety within other languages, within the alternative web browser engine at a minimum for all code that processes web content;
AFAIK all major engines are written primarily in C++. This "features that improve memory safety" is worryingly vague, and we already know Apple goes out of it's way to make these rulings less useful.
I wouldn't be surprised if they rejected both Firefox and Chrome on these grounds.
>> To qualify for the entitlement, your app must:
>>> Be distributed solely on iOS and/or iPadOS in the European Union;
I assume this means you have to release a separate App like "Firefox EU" to be able to use Gecko, right? Practically speaking, would any major players actually do it? It just sounds unlikely to me but I may miss something.
> Be distributed solely on iOS and/or iPadOS in the European Union
These jokers. This is the usual malicious compliance.
Interesting, I wasn't aware that Lockdown Mode disabled JIT. Does it do that system-wide, or only for third party apps?
I wonder if chrome will implement their sandbox on IOS first because of this
Especially considering iOS is far from having majority marketshare in EU compared to Android... this feels like forcing a minor player (iOS in EU) to help a major player (Chrome).
Besides that I wonder what happens if I travel outside of the EU. Will they just remotely disable everything I could do while in the EU?
Kind of ironic that they are also requiring WPT compliance while they are the worst scoring major browser there.
Smells like malicious compliance.
Related
European Union regulators accuse Apple of breaching the bloc's tech rules
EU accuses Apple of Digital Markets Act violations for restricting App Store alternatives and charging high developer fees. New probe initiated on contractual terms. Apple defends changes, faces potential fines up to 10%.
Apple Disables WebKit's JIT in Lockdown Mode, & BrowserEngineKit Is Restricted
Apple has disabled WebKit's JIT in Lockdown Mode for enhanced security, aligning with EU's DMA. BrowserEngineKit enables secure JIT compilation, balancing performance and safety, requiring authorized developers for alternative browser engines.
Apple Disables WebKit's JIT in Lockdown Mode
Apple disables WebKit's JIT in Lockdown Mode for security, affecting web browsing speed. BrowserEngineKit complies with EU's DMA, allowing third-party engines while ensuring security. Apple balances compliance, security, and performance.
Apple announces new fees for apps in the EU that link to the web for purchases
Apple has revised its fee structure for EU apps linking to external purchases, introducing a two-tiered system with lower fees for developers, while exempting existing subscriptions from these changes.
Apple Revises DMA Compliance
Apple updated its compliance plan for the EU's Digital Markets Act, allowing developers to include external links in apps and introducing a dual fee structure to lower costs while addressing regulatory scrutiny.