Mastodon Feed: Post

Mastodon Feed

slightlyoff@toot.cafe ("Alex Russell") wrote:

People who understand some of the tech might say *"ah, but App Bound Domains!"*[1]

What those folks, and perhaps Apple's mgmt, have decided not to understand is that script injection is *no obstacle* for an entity that can both dominate the app market *and* cause most publishers to embed bits of JS within their pages.

ABD would work *if and only if* Apple also blocked tracking scripts from 3p origins associated with the hosting app, when loading a `WKWebView`.

[1]: https://webkit.org/blog/10882/app-bound-domains/