Hi everyone,
Between Google Play Integrity API lockdowns, Apple App Attest, and upcoming eID/age-verification mandates, alternative and privacy-focused operating systems (like GrapheneOS, LineageOS, and Linux on mobile) are being systematically locked out of banking, public portals, and everyday apps.
Rather than watching vendor lock-in get worse, I am organizing a European Citizens’ Initiative (ECI) working title: “My Device, My OS” to push binding EU legislation for Device Neutrality and Open Attestation.
What we aim to achieve:
- Mandate Open Attestation Standards: Require services operating in the EU to support open, vendor-neutral hardware attestation rather than relying exclusively on proprietary gatekeeper APIs (Google/Apple).
- Ban Device/OS Discrimination: Prevent public services, digital ID wallets, and essential commercial apps from arbitrarily blocking users solely for running independent or de-Googled operating systems.
- Protect Hardware Sovereignty: Enshrine the legal right of consumers to install and run the operating system of their choice without losing access to the digital single market.
Join the Matrix room to discuss, collaborate on the draft, and coordinate next steps:
👉 #my-device-my-os:pollorebozado.com
Feedback, technical insights, and EU organizers are all welcome!
GrapheneOS devs are going to blow a gasket - they hate attestation of any kind.
But I do remember a few european companies working on a attestation. I think it was spearheaded by the devs of eOS and Jolla. They might want to talk to you about it.
Edit: I was not far off. It’s by Volla and called UniAttest aka Unified Attestation
GrapheneOS devs are going to blow a gasket - they hate attestation of any kind.
No they don’t. GrahpeneOS supports attestation and runs an integrity monitoring service so users can detect tampering with their GrapheneOS devices.
I hate third-party apps having the ability to use remote attestation, but I am not the GrapheneOS devs.
Uh, @GrapheneOS@grapheneos.social does hate attestation: see here
GrapheneOS is opposed to using attestation for lock-in, including Unified Attestation. They are not opposed to all uses of attestation, which they write in the linked thread:
Hardware-based attestation has valid use cases including the Auditor app on GrapheneOS for protecting users.
Yes, of course. “My attestation is better and who will be able to use it? GrapheneOS of course! This isn’t lock-in BTW 😙”
One of their team members of eOS has joined the comitee
…because it’s not an open standard but they would probably still hate what this proposal wants.
great news !
keep us posted, I’m there if you want us to sign anything !
