Consumer Rights Wiki - User contributions [en]

Consumer Rights Wiki talk:Moderators' noticeboard

2025-08-25T21:28:33Z

Rampant-quack-painting: /* Article status appeal: "The Italian digital identity wallet only supports Google-certified Android devices" */ Reply

<div style="margin: {{#ifeq:{{{navbox|<noinclude>yes</noinclude>}}}|yes|2px}} 0 0.5em; padding: 0.5em; {{{style|border: 1px solid #A0A5AD;}}} {{{backgroundstyle|background-color: var(--background-color-progressive-subtle, #eaf3ff); color: inherit;}}}">
<div style="padding: 0.25em 0; text-align: center; font-size: 120%; border-radius: 3px; font-weight: bold; {{{titlestyle|background-color: var(--background-color-content-added, #aad1ff); color: inherit;}}}">Welcome — post issues of interest to Moderators</div>
*Post '''appeals''' to article notice templates (e.g. Incomplete, Stub, etc.)
*Post requests for '''moderator action''' here (e.g. blocks)
*Just need a mod? Post here or ping a mod with a question.
*Post any information or news relevant to the moderation team here.
*To request an article to be created, do not post here, try [[Article suggestions]] instead.
*Do not report technical issues here, please use the [[Consumer_Rights_Wiki_talk:Bugs|Bugs noticeboard]] instead.

<div style="padding: 0.25em 0; text-align: center; font-size: 150%; border-radius: 3px; font-weight: bold">[[Special:NewSection/Consumer Rights Wiki talk:Moderators' noticeboard|Start a new section]]</div>
</div>
<br />
{{Archives}} 
==Open tasks==

*[[:Category:Articles with deletion requests]]
*[[:Category:Articles with merge requests]]
*[[:Category:Articles marked as irrelevant]]
*[[Special:NewPages]]

==can this page be easily accessible (like from the left-side taskbar or something) ?==

I love the fact that you guys created this page ; i believe having less and less reliance on discord is a good thing, but currently this page is hidden deep and if you dont know it exists you will never find it. Please make it available easily in some way. [[User:Plankton|Plankton]] ([[User talk:Plankton|talk]]) 19:27, 20 August 2025 (UTC)

:Hi, thanks for posting this… I believe that is indeed the plan that we’re either going to add this to the policy page or the side bar or the help page. The team will discuss it and we will update you. [[User:Atsumari|Atsumari]] ([[User talk:Atsumari|talk]]) 19:29, 20 August 2025 (UTC)
:Done. I agree better visibility is important. '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 20:16, 20 August 2025 (UTC)
::Also, this page is linked to on all the article notice templates so it'll be easy to find when someone needs to come here. '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 21:01, 20 August 2025 (UTC)

==deletion request :==

this is difficult to explain because english is my second language but i believe some people have accidently written stuff in the wrong article. please check out [[Link to the main article|this article]] yourself, you will understand what i mean when reading the title and the content. [[User:Plankton|Plankton]] ([[User talk:Plankton|talk]]) 21:00, 20 August 2025 (UTC)

:Thanks for the report! I have removed the article for being written with AI. It is now protected so nobody can create an article with that title. [[User:Mr Pollo|Mr Pollo]] ([[User talk:Mr Pollo|talk]]) 21:51, 20 August 2025 (UTC)

==Request for comment: Transcript articles==

An editor has raised a question on the need for AI generated transcripts of Louis Rossmann videos being hosted on this site. It seems these articles have been around for a while and are in the guideline pages as okay to include. I don't feel strongly about these and I wanted to ask more broadly about the need. According to [[:Category:Transcripts]] we have about 20 of them.

Here is the comment in question that prompted me asking for feedback from others: [[Talk:Insta360 camera locks you out "to protect your consumer rights" - corporate gaslighting#why does this bs exist. why do these articles exist. can we stop ? this is so annoying. who wants this ??]] (pinging @[[User:Plankton|Plankton]]) '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 01:06, 21 August 2025 (UTC)

:yeah thats me. i apologize for the strong language in my original post on the talk page of the [[Insta360 camera locks you out "to protect your consumer rights" - corporate gaslighting|article]]. I just dont feel these articles are worth anything at all. I doubt anyone would ever read them. And their existance may even turn people down from writing their own article on the subject since one (though of poor quality) already exists. I dont know why they were allowed in the first place, but i feel like they should be removed. In my opinion, they bring down the quality of the wiki. If a gouvernment representative ever looks at the wiki for info and falls onto AI bs, they might not see the wiki as a quality documentation. [[User:Plankton|Plankton]] ([[User talk:Plankton|talk]]) 01:24, 21 August 2025 (UTC)
::I think you're right. They served a purpose to start with, but have outlived it. I'll do a proper purge of them and anything related to them shortly, starting with deleting those ones you linked just now [[User:Keith|Keith]] ([[User talk:Keith|talk]]) 10:44, 21 August 2025 (UTC)
:::Ok - I've deleted the transcripts which were on the site. I'll start the rest of the cleanup in a bit but in the meantime feel free to point out any references to them that need to go and I can mop them all up [[User:Keith|Keith]] ([[User talk:Keith|talk]]) 11:02, 21 August 2025 (UTC)
::::I assume [[Template:Autogenerated]] needs to go also? '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 15:00, 21 August 2025 (UTC)

==Am i allowed to make articles on legislature that is outside the US ?==

For the Legislature articles, are they only US centric ? or can I make articles on legislature from my country ? Moreover, do the sources cited need to be in english. Obviously the content of the page needs to be in english since this is an english wiki, but can the source be in other languages ? [[User:Plankton|Plankton]] ([[User talk:Plankton|talk]]) 22:25, 21 August 2025 (UTC)

:Consumer rights is a global issue. Yes, it is okay to include non-US issues and non-english sources, but it is preferable to find English sources. '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 22:52, 21 August 2025 (UTC)

==Hello dear moderators, please delete the page FTX i created==

So, At first i thought i should make an article on what happened with FTX and so i started a page. But after some thoughts i realised that the actual article I wanted to write is on the systemic issue of cryptocurrency fraud in general, and not simply on FTX. so can you guys please delete the FTX page i made ? [[User:Plankton|Plankton]] ([[User talk:Plankton|talk]]) 05:23, 22 August 2025 (UTC)

:If you want to keep the page and just have it converted to another name, we can do that that way it still aligns with the issue you’re trying to discuss. As long as it’s systemic and works with in the editorial guidelines, it doesn’t necessarily need to be deleted. If you still do want us to remove it, please let us know. The same thing it was for if you want more help with the article just feel free to let us know. [[User:Atsumari|Atsumari]] ([[User talk:Atsumari|talk]]) 11:53, 22 August 2025 (UTC)

==Deletion appeal "Presonus removes VSL...."==

Hello, I created a few days ago a page about Presonus deleting a software that was marketed with audio interfaces. I tried making changes on the page but the captcha just wouldn't trust that I was human and wouldn't let me add content to the article that's why it was empty.

It should now have some context and references, sorry for the inconvenience.

Best regards [[User:Leonneon|Leonneon]] ([[User talk:Leonneon|talk]]) 21:09, 22 August 2025 (UTC)

:I take it you're talking about this article [[Presonus removes VSL mixing app from VSL audio interfaces products line]] @[[User:Leonneon|Leonneon]]? I have removed the deletion notice. Thanks for making the article. '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 23:15, 22 August 2025 (UTC)
:Yes it's the one, thank you have a great day [[User:Leonneon|Leonneon]] ([[User talk:Leonneon|talk]]) 16:31, 25 August 2025 (UTC)

==Should CRW be indexed by search engines?==

Hello, I am writing here as I found a setting in the visual editor if you click those three lines and then ‘advanced settings’, which asks if you want a page to be indexed by search engines. I am sure that this setting is set to default, which means no on all articles (unless this was covered before and i do not know about it). I think this setting could be useful sometimes, but not always, to make the wiki easier to find and not just “I watch Louis Rossman so I know about the CRW!” and also make others learn about this in general. You can probably make a discussion about this if this wasn’t talked about before. [[User:AnotherConsumerRightsPerson|AnotherConsumerRightsPerson]] ([[User talk:AnotherConsumerRightsPerson|talk]]) 19:27, 23 August 2025 (UTC)

:@[[User:AnotherConsumerRightsPerson|AnotherConsumerRightsPerson]], I did a search (on Google) for "Microsoft consumer rights wiki" and this wiki did come up in the 3rd-4th result. So I am pretty sure this wiki is indexed by search engines. I'll forward this to developers just in case. '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 02:17, 24 August 2025 (UTC)
::@[[User:JackFromWisconsin|JackFromWisconsin]] I searched this on Ecosia and I got the same thing too. [[User:AnotherConsumerRightsPerson|AnotherConsumerRightsPerson]] ([[User talk:AnotherConsumerRightsPerson|talk]]) 05:52, 24 August 2025 (UTC)

==Article status appeal: "The Italian digital identity wallet only supports Google-certified Android devices"==

Hello,

I've created the article [[The Italian digital identity wallet only supports Google-certified Android devices]] today in a work-in-progress state and it was flagged as a stub. I think it's ready to lose the stub status now as I've published the final draft. Could you please check? Thanks [[User:Rampant-quack-painting|Rampant-quack-painting]] ([[User talk:Rampant-quack-painting|talk]]) 21:40, 24 August 2025 (UTC)

:@[[User:Rampant-quack-painting|Rampant-quack-painting]] Thank you for creating that article. I have removed the stub notice. If you want, the citations could use some work to complete them, but that's the only big thing I'm seeing wrong right now. Just adding in the author, website name, and date would go a long way in the citations. '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 13:17, 25 August 2025 (UTC)
::Hi Jack, I've enriched all the citations and archived them on the Wayback Machine. Thanks [[User:Rampant-quack-painting|Rampant-quack-painting]] ([[User talk:Rampant-quack-painting|talk]]) 21:28, 25 August 2025 (UTC)

==Remove eff digital fingerprint tool from consumer privacy tools.==

These tools that supposedly tell you your fingerprint are unreliable and are reccomended against in the privacyguides.org forum. They are also not listed on privacyguides.org for this and many other reasons. I think we should try not to clutter the tools section and rely on strong resources like privacyguides.org for their suggestions. [[User:Dentist5735|Dentist5735]] ([[User talk:Dentist5735|talk]]) 00:04, 25 August 2025 (UTC)

:Also a link to the BBB? Seriously? https://money.cnn.com/2015/09/30/news/better-business-bureau/index.html [[User:Dentist5735|Dentist5735]] ([[User talk:Dentist5735|talk]]) 00:12, 25 August 2025 (UTC)
:@[[User:Dentist5735|Dentist5735]] I agree with this -- less clutter is best. I'll wait for others to chime in before making a change however. '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 14:54, 25 August 2025 (UTC)

==Make CRW: Redirects for pages starting with Consumer Rights Wiki:==

Hello. This time I am here as I hate having to write Consumer Rights Wiki: every time I need a page in that section of the wiki. Can we please have redirects to these pages where instead of Consumer Rights Wiki: we can type CRW: sort of like how Wikipedia pages have Wikipedia: and WP: for redirects? Thanks. [[User:AnotherConsumerRightsPerson|AnotherConsumerRightsPerson]] ([[User talk:AnotherConsumerRightsPerson|talk]]) 11:26, 25 August 2025 (UTC)

:I can forward that to the developers. Also, you can do Project: as kind of a shortcut already. '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 13:19, 25 August 2025 (UTC)

The Italian digital identity wallet only supports Google-certified Android devices

2025-08-25T21:27:15Z

Rampant-quack-painting: Enriched references metadata

{{Incomplete|Issue 1=Citations are missing information (Author, publish date, Website name)}}

==Overview of IT-Wallet and its technical requirements==
"IO, l'app dei servizi pubblici" (IO hereinafter) is an app developed by PagoPA S.p.A., a State-owned enterprise which develops tools to make digital public services available in Italy.<ref>{{Cite web |date=2025-08-25 |title=About us page on PagoPA's website |url=https://www.pagopa.it/en/company/about-us/ |url-status=live |archive-url=https://web.archive.org/web/20250825201650/https://www.pagopa.it/en/company/about-us/ |archive-date=2025-08-25 |access-date=2025-08-25 |website=PagoPA S.p.A.}}</ref> The app can be downloaded on Android and iOS.<ref>{{Cite web |date=2025-08-25 |title=IO F.A.Q.s on how to install the app |url=https://ioapp.it/domande-frequenti#come-installare-io |url-status=live |archive-url=https://web.archive.org/web/20250716101927/https://ioapp.it/domande-frequenti#come-installare-io |archive-date=2025-07-16 |access-date=2025-08-25 |website=IO, l'app dei servizi pubblici}}</ref>

One of the services offered by IO is "Documenti su IO" (IT-Wallet hereinafter), a wallet containing digital identification documents<ref>{{Cite web |date=2025-08-25 |title=IO F.A.Q.s on what Documenti su IO is |url=https://ioapp.it/domande-frequenti#cose-documenti |url-status=live |archive-url=https://web.archive.org/web/20250716101927/https://ioapp.it/domande-frequenti#cose-documenti |archive-date=2025-07-16 |access-date=2025-08-25 |website=IO, l'app dei servizi pubblici}}</ref>, as defined by the [https://digital-strategy.ec.europa.eu/en/policies/eidas-regulation eIDAS regulation].

To be able to access the IT-Wallet, the user needs to satisfy certain device integrity requirements, which the app's F.A.Q.s define as (translated from Italian)<ref name=":0" />:<blockquote>The device should not be compromised, that is, it should not be modified in such a way as to remove the security restrictions imposed by the operating system (for instance, jailbreak on iOS or rooting on Android). Furthermore, it is necessary that the app being executed is the official one, downloaded and signed from the Android and Apple stores (respectively, Play Store and App Store). </blockquote>On Android, these integrity requirements are checked with the Play Integrity API.<ref name=":0">{{Cite web |date=2025-08-25 |title=IO F.A.Q.s on technical requirements for the IT-Wallet |url=https://ioapp.it/domande-frequenti#requisiti-minimi |url-status=live |archive-url=https://web.archive.org/web/20250716101927/https://ioapp.it/domande-frequenti#requisiti-minimi |archive-date=2025-07-16 |access-date=2025-08-25 |website=IO, l'app dei servizi pubblici}}</ref>

The distribution policy and the implementation of the integrity checks highlighted above pose two issues discussed in the next sections.

==Exclusive distribution on Google Play Store==
IO is distributed on Android exclusively via the Google Play Store, which may not be available on all devices<ref>{{Cite web |date=2025-08-25 |title=List of Android devices compatible with Google Play |url=https://storage.googleapis.com/play_public/supported_devices.html |url-status=live |archive-url=https://web.archive.org/web/20250825204544/https://storage.googleapis.com/play_public/supported_devices.html |archive-date=2025-08-25 |access-date=2025-08-25 |website=Supported devices - Google Play Help}}</ref> or the user may be running a non-Google licensed or non-Google compatible version of Android, which could not include the Play Store or may not even be [[wikipedia:Google_Play#Compatibility|eligible]] to include it. Moreover, users may wish not to install Google services on the device themselves in favor of alternatives.

Android devices are not only those running a version of the OS commercially licensed by Google to include the proprietary [[wikipedia:Google_Mobile_Services|Google Mobile Services]] (GMS), a collection of proprietary applications and APIs from Google, containing Google Play and Google Play services. Devices running Android versions based on or stemming from the [https://source.android.com/ Android Open Source Project] or devices produced by an original equipment manufacturer (OEM) with an agreement with Google that does not include GMS should also be taken into consideration.

Manufacturers wishing to ship devices with GMS and the Play Store pre-installed are required to enter into an agreement with Google.<ref name=":1">{{Cite web |date=2025-08-25 |title=Appendix of report from the UK's Competition and Markets Authority |url=https://assets.publishing.service.gov.uk/media/61b794d6d3bf7f05545e1416/Appendix_E_-_Google_agreements_with_device_manufacturers_and_app_developers.pdf |url-status=live |archive-url=https://web.archive.org/web/20250717192313/https://assets.publishing.service.gov.uk/media/61b794d6d3bf7f05545e1416/Appendix_E_-_Google_agreements_with_device_manufacturers_and_app_developers.pdf |archive-date=2025-07-17 |access-date=2025-08-25 |website=assets.publishing.service.gov.uk}}</ref> Google's position in the app distribution market can be seen as concerning for market competition<ref>{{Cite web |date=2013-04-10 |title=Rivals claim Google's 'deceptive' use of Android has been anti-competitive |url=https://www.pinsentmasons.com/out-law/news/rivals-claim-googles-deceptive-use-of-android-has-been-anti-competitive |url-status=live |archive-url=https://web.archive.org/web/20250825205900/https://www.pinsentmasons.com/out-law/news/rivals-claim-googles-deceptive-use-of-android-has-been-anti-competitive |archive-date=2025-08-25 |access-date=2025-08-25 |website=Pinsent Masons}}</ref>, as it could represent a barrier to emerging distribution channels and app stores.<ref name=":1" /> The European Union itself designated Alphabet (the parent holding company of Google) as a ''gatekeeper'' '''—''' a large digital platform providing core platform services, that needs to comply with specific regulations set forth in the Digital Markets Act '''—''' with respect to its Google Play platform.<ref name=":2">{{Cite web |date=2023-09-05 |title=EU's designation decision on Google Play |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100002_145.pdf |url-status=live |archive-url=https://web.archive.org/web/20250703093659/https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100002_145.pdf |archive-date=2025-07-03 |access-date=2025-08-25 |website=European Commission}}</ref> One of the purposes of the DMA is to enforce the right of European citizens to have the choice to install preferred apps directly from the web or alternative app stores.<ref>{{Cite web |date=2025-08-25 |title=About the Digital Markets Act |url=https://digital-markets-act.ec.europa.eu/about-dma_en#what-does-this-mean-for-consumers |url-status=live |archive-url=https://web.archive.org/web/20250825210330/https://digital-markets-act.ec.europa.eu/about-dma_en#what-does-this-mean-for-consumers |archive-date=2025-08-25 |access-date=2025-08-25 |website=Digital Markets Act}}</ref>

Note that the European Digital Identity Wallet Architecture and Framework Reference explicitly states that wallets can be made available "on other means than the official OS app store".<ref>{{Cite web |date=2025-02-04 |title=Section 6.5.2.2 of the EU Digital Identity Wallet Architecture and Framework Reference |url=https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/blob/main/docs/architecture-and-reference-framework-main.md |url-status=live |archive-url=https://web.archive.org/web/20250726100752/https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/blob/main/docs/architecture-and-reference-framework-main.md |archive-date=2025-07-26 |access-date=2025-08-25 |website=GitHub}}</ref>

==Use of Play Integrity API==
The [[Google Play Integrity API]] is part of Google Play<ref>{{Cite web |date=2025-07-24 |title=Google Play Integrity terms |url=https://developer.android.com/google/play/integrity/terms |url-status=live |archive-url=https://web.archive.org/web/20250825211316/https://developer.android.com/google/play/integrity/terms |archive-date=2025-08-25 |access-date=2025-08-25 |website=Android Mobile App Developer Tools}}</ref> and its strong integrity check is not compatible with devices running on alternative operating systems. This issue has been reported by the [https://grapheneos.org/ GrapheneOS] developers<ref>{{Cite web |date=2025-08-25 |title=GrapheneOS attestation compatibility guide |url=https://grapheneos.org/articles/attestation-compatibility-guide |url-status=live |archive-url=https://web.archive.org/web/20250825211648/https://grapheneos.org/articles/attestation-compatibility-guide |archive-date=2025-08-25 |access-date=2025-08-25 |website=GrapheneOS}}</ref> and by IO users.<ref>{{Cite web |date=2024-12-06 |title=Forum thread discussing lack of IT-Wallet support on GrapheneOS |url=https://forum.italia.it/t/grapheneos-e-documenti-su-io/43232/3 |url-status=live |archive-url=https://web.archive.org/web/20250825211802/https://forum.italia.it/t/grapheneos-e-documenti-su-io/43232/3 |archive-date=2025-08-25 |access-date=2025-08-25 |website=Forum Italia}}</ref><ref>{{Cite web |date=2024-10-23 |title=Issue on IO's GitHub repository |url=https://github.com/pagopa/io-app/issues/6327 |url-status=live |archive-url=https://web.archive.org/web/20250720071402/https://github.com/pagopa/io-app/issues/6327 |archive-date=2025-07-20 |access-date=2025-08-25 |website=GitHub}}</ref><ref>{{Cite web |date=2024-11-28 |title=/e/os user reports issues with IO on the e Foundation community |url=https://community.e.foundation/t/io-app-it-wallet-play-integrity-api-and-key-attestation/63555 |url-status=live |archive-url=https://web.archive.org/web/20250825212120/https://community.e.foundation/t/io-app-it-wallet-play-integrity-api-and-key-attestation/63555 |archive-date=2025-08-25 |access-date=2025-08-25 |website=/e/OS community}}</ref><ref>{{Cite web |date=2025-08-25 |title=Users' reports in Google Play reviews of the IO app |url=https://play.google.com/store/apps/details?id=it.pagopa.io.app&hl=en-US |url-status=live |archive-url=https://web.archive.org/web/20250226184528/https://play.google.com/store/apps/details?id=it.pagopa.io.app&hl=en-US |archive-date=2025-02-26 |access-date=2025-08-25 |website=Google Play}}</ref>

A more universally compatible solution to check the integrity of the device would be the standard Android [https://developer.android.com/privacy-and-security/security-key-attestation hardware attestation API], which would support non-Google alternative operating systems via the whitelisting of their keys.

==Impact==
The design choices of the IT-Wallet make it so that the service is only accessible to Italian citizens using one of two core services from Apple and Google, two foreign companies designated as gatekeepers by the EU Digital Markets Act.<ref name=":2" /><ref>{{Cite web |date=2023-09-05 |title=EU's designation decision on the AppStore |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100013_215.pdf |url-status=live |archive-url=https://web.archive.org/web/20250728225957/https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100013_215.pdf |archive-date=2025-07-28 |access-date=2025-08-25 |website=European Commission}}</ref> Furthermore, Android users can only use the IT-Wallet if they have a Google-certified device and OS.

Distributing the app on Android via channels other than Google Play and performing integrity checks via the [https://developer.android.com/privacy-and-security/security-key-attestation hardware attestation API] instead of the Google Play Integrity API would enable users to access the service on alternative devices and operating systems, not restricting it to services with a dominant position in the market.

==References==
{{reflist}}
[[Category:IO]]

The Italian digital identity wallet only supports Google-certified Android devices

2025-08-25T08:14:17Z

Rampant-quack-painting: Clarified the OEM abbreviation

{{Stub}}
==Overview of IT-Wallet and its technical requirements==
"IO, l'app dei servizi pubblici" (IO hereinafter) is an app developed by PagoPA S.p.A., a State-owned enterprise which develops tools to make digital public services available in Italy.<ref>{{Cite web |title=About us page on PagoPA's website |url=https://www.pagopa.it/en/company/about-us/}}</ref> The app can be downloaded on Android and iOS.<ref>{{Cite web |title=IO F.A.Q.s on how to install the app |url=https://ioapp.it/domande-frequenti#come-installare-io}}</ref>

One of the services offered by IO is *Documenti su IO* (IT-Wallet hereinafter), a wallet containing digital identification documents<ref>{{Cite web |title=IO F.A.Q.s on what Documenti su IO is |url=https://ioapp.it/domande-frequenti#cose-documenti}}</ref>, as defined by the [https://digital-strategy.ec.europa.eu/en/policies/eidas-regulation eIDAS regulation].

To be able to access the IT-Wallet, the user needs to satisfy certain device integrity requirements, which the app's F.A.Q.s define as (translated from Italian)<ref name=":0" />:<blockquote>The device should not be compromised, that is, it should not be modified in such a way as to remove the security restrictions imposed by the operating system (for instance, jailbreak on iOS or rooting on Android). Furthermore, it is necessary that the app being executed is the official one, downloaded and signed from the Android and Apple stores (respectively, Play Store and App Store). </blockquote>On Android, these integrity requirements are checked with the Play Integrity API.<ref name=":0">{{Cite web |title=IO F.A.Q.s on technical requirements for the IT-Wallet |url=https://ioapp.it/domande-frequenti#requisiti-minimi}}</ref>

The distribution policy and the implementation of the integrity checks highlighted above pose two issues discussed in the next sections.

==Exclusive distribution on Google Play Store==
IO is distributed on Android exclusively via the Google Play Store, which may not be available on all devices<ref>{{Cite web |title=List of Android devices compatible with Google Play |url=https://storage.googleapis.com/play_public/supported_devices.html}}</ref> or the user may be running a non-Google licensed or non-Google compatible version of Android, which could not include the Play Store or may not even be [[wikipedia:Google_Play#Compatibility|eligible]] to include it. Moreover, users may wish not to install Google services on the device themselves in favor of alternatives.

Android devices are not only those running a version of the OS commercially licensed by Google to include the proprietary [[wikipedia:Google_Mobile_Services|Google Mobile Services]] (GMS), a collection of proprietary applications and APIs from Google, containing Google Play and Google Play services. Devices running Android versions based on or stemming from the [https://source.android.com/ Android Open Source Project] or devices produced by an original equipment manufacturer (OEM) with an agreement with Google that does not include GMS should also be taken into consideration.

Manufacturers wishing to ship devices with GMS and the Play Store pre-installed are required to enter into an agreement with Google.<ref name=":1">{{Cite web |title=Appendix of report from the UK's Competition and Markets Authority |url=https://assets.publishing.service.gov.uk/media/61b794d6d3bf7f05545e1416/Appendix_E_-_Google_agreements_with_device_manufacturers_and_app_developers.pdf}}</ref> Google's position in the app distribution market can be seen as concerning for market competition<ref>{{Cite web |date=2013-04-10 |title=Rivals claim Google's 'deceptive' use of Android has been anti-competitive |url=https://www.pinsentmasons.com/out-law/news/rivals-claim-googles-deceptive-use-of-android-has-been-anti-competitive}}</ref>, as it could represent a barrier to emerging distribution channels and app stores.<ref name=":1" /> The European Union itself designated Alphabet (the parent holding company of Google) as a ''gatekeeper'' '''—''' a large digital platform providing core platform services, that needs to comply with specific regulations set forth in the Digital Markets Act '''—''' with respect to its Google Play platform.<ref name=":2">{{Cite web |title=EU's designation decision on Google Play |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100002_145.pdf}}</ref> One of the purposes of the DMA is to enforce the right of European citizens to have the choice to install preferred apps directly from the web or alternative app stores.<ref>{{Cite web |title=About the Digital Markets Act |url=https://digital-markets-act.ec.europa.eu/about-dma_en#what-does-this-mean-for-consumers}}</ref>

Note that the European Digital Identity Wallet Architecture and Framework Reference explicitly states that wallets can be made available "on other means than the official OS app store".<ref>{{Cite web |title=Section 6.5.2.2 of the EU Digital Identity Wallet Architecture and Framework Reference |url=https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/blob/main/docs/architecture-and-reference-framework-main.md}}</ref>

==Use of Play Integrity API==
The [[Google Play Integrity API]] is part of Google Play<ref>{{Cite web |title=Google Play Integrity terms |url=https://developer.android.com/google/play/integrity/terms}}</ref> and its strong integrity check is not compatible with devices running on alternative operating systems. This issue has been reported by the [https://grapheneos.org/ GrapheneOS] developers<ref>{{Cite web |title=GrapheneOS attestation compatibility guide |url=https://grapheneos.org/articles/attestation-compatibility-guide}}</ref> and by IO users.<ref>{{Cite web |title=Forum thread discussing lack of IT-Wallet support on GrapheneOS |url=https://forum.italia.it/t/grapheneos-e-documenti-su-io/43232/3}}</ref><ref>{{Cite web |title=Issue on IO's GitHub repository |url=https://github.com/pagopa/io-app/issues/6327}}</ref><ref>{{Cite web |title=/e/os user reports issues with IO on the e Foundation community |url=https://community.e.foundation/t/io-app-it-wallet-play-integrity-api-and-key-attestation/63555}}</ref><ref>{{Cite web |title=Users' reports in Google Play reviews of the IO app |url=https://play.google.com/store/apps/details?id=it.pagopa.io.app&hl=en-US}}</ref>

A more universally compatible solution to check the integrity of the device would be the standard Android [https://developer.android.com/privacy-and-security/security-key-attestation hardware attestation API], which would support non-Google alternative operating systems via the whitelisting of their keys.

==Impact==
The design choices of the IT-Wallet make it so that the service is only accessible to Italian citizens using one of two core services from Apple and Google, two foreign companies designated as gatekeepers by the EU Digital Markets Act.<ref name=":2" /><ref>{{Cite web |title=EU's designation decision on the AppStore |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100013_215.pdf}}</ref> Furthermore, Android users can only use the IT-Wallet if they have a Google-certified device and OS.

Distributing the app on Android via channels other than Google Play and performing integrity checks via the [https://developer.android.com/privacy-and-security/security-key-attestation hardware attestation API] instead of the Google Play Integrity API would enable users to access the service on alternative devices and operating systems, not restricting it to services with a dominant position in the market.

==References==
{{reflist}}
[[Category:IO]]

The Italian digital identity wallet only supports Google-certified Android devices

2025-08-24T22:40:00Z

Rampant-quack-painting: Renamed Conclusion section to Impact

{{Stub}}
==Overview of IT-Wallet and its technical requirements==
"IO, l'app dei servizi pubblici" (IO hereinafter) is an app developed by PagoPA S.p.A., a State-owned enterprise which develops tools to make digital public services available in Italy.<ref>{{Cite web |title=About us page on PagoPA's website |url=https://www.pagopa.it/en/company/about-us/}}</ref> The app can be downloaded on Android and iOS.<ref>{{Cite web |title=IO F.A.Q.s on how to install the app |url=https://ioapp.it/domande-frequenti#come-installare-io}}</ref>

One of the services offered by IO is *Documenti su IO* (IT-Wallet hereinafter), a wallet containing digital identification documents<ref>{{Cite web |title=IO F.A.Q.s on what Documenti su IO is |url=https://ioapp.it/domande-frequenti#cose-documenti}}</ref>, as defined by the [https://digital-strategy.ec.europa.eu/en/policies/eidas-regulation eIDAS regulation].

To be able to access the IT-Wallet, the user needs to satisfy certain device integrity requirements, which the app's F.A.Q.s define as (translated from Italian)<ref name=":0" />:<blockquote>The device should not be compromised, that is, it should not be modified in such a way as to remove the security restrictions imposed by the operating system (for instance, jailbreak on iOS or rooting on Android). Furthermore, it is necessary that the app being executed is the official one, downloaded and signed from the Android and Apple stores (respectively, Play Store and App Store). </blockquote>On Android, these integrity requirements are checked with the Play Integrity API.<ref name=":0">{{Cite web |title=IO F.A.Q.s on technical requirements for the IT-Wallet |url=https://ioapp.it/domande-frequenti#requisiti-minimi}}</ref>

The distribution policy and the implementation of the integrity checks highlighted above pose two issues discussed in the next sections.

==Exclusive distribution on Google Play Store==
IO is distributed on Android exclusively via the Google Play Store, which may not be available on all devices<ref>{{Cite web |title=List of Android devices compatible with Google Play |url=https://storage.googleapis.com/play_public/supported_devices.html}}</ref> or the user may be running a non-Google licensed or non-Google compatible version of Android, which could not include the Play Store or may not even be [[wikipedia:Google_Play#Compatibility|eligible]] to include it. Moreover, users may wish not to install Google services on the device themselves in favor of alternatives.

Android devices are not only those running a version of the OS commercially licensed by Google to include the proprietary [[wikipedia:Google_Mobile_Services|Google Mobile Services]] (GMS), a collection of proprietary applications and APIs from Google, containing Google Play and Google Play services. Devices running Android versions based on or stemming from the [https://source.android.com/ Android Open Source Project] or devices produced by an OEM with an agreement with Google that does not include GMS should also be taken into consideration.

Manufacturers wishing to ship devices with GMS and the Play Store pre-installed are required to enter into an agreement with Google.<ref name=":1">{{Cite web |title=Appendix of report from the UK's Competition and Markets Authority |url=https://assets.publishing.service.gov.uk/media/61b794d6d3bf7f05545e1416/Appendix_E_-_Google_agreements_with_device_manufacturers_and_app_developers.pdf}}</ref> Google's position in the app distribution market can be seen as concerning for market competition<ref>{{Cite web |date=2013-04-10 |title=Rivals claim Google's 'deceptive' use of Android has been anti-competitive |url=https://www.pinsentmasons.com/out-law/news/rivals-claim-googles-deceptive-use-of-android-has-been-anti-competitive}}</ref>, as it could represent a barrier to emerging distribution channels and app stores.<ref name=":1" /> The European Union itself designated Alphabet (the parent holding company of Google) as a ''gatekeeper'' '''—''' a large digital platform providing core platform services, that needs to comply with specific regulations set forth in the Digital Markets Act '''—''' with respect to its Google Play platform.<ref name=":2">{{Cite web |title=EU's designation decision on Google Play |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100002_145.pdf}}</ref> One of the purposes of the DMA is to enforce the right of European citizens to have the choice to install preferred apps directly from the web or alternative app stores.<ref>{{Cite web |title=About the Digital Markets Act |url=https://digital-markets-act.ec.europa.eu/about-dma_en#what-does-this-mean-for-consumers}}</ref>

Note that the European Digital Identity Wallet Architecture and Framework Reference explicitly states that wallets can be made available "on other means than the official OS app store".<ref>{{Cite web |title=Section 6.5.2.2 of the EU Digital Identity Wallet Architecture and Framework Reference |url=https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/blob/main/docs/architecture-and-reference-framework-main.md}}</ref>

==Use of Play Integrity API==
The [[Google Play Integrity API]] is part of Google Play<ref>{{Cite web |title=Google Play Integrity terms |url=https://developer.android.com/google/play/integrity/terms}}</ref> and its strong integrity check is not compatible with devices running on alternative operating systems. This issue has been reported by the [https://grapheneos.org/ GrapheneOS] developers<ref>{{Cite web |title=GrapheneOS attestation compatibility guide |url=https://grapheneos.org/articles/attestation-compatibility-guide}}</ref> and by IO users.<ref>{{Cite web |title=Forum thread discussing lack of IT-Wallet support on GrapheneOS |url=https://forum.italia.it/t/grapheneos-e-documenti-su-io/43232/3}}</ref><ref>{{Cite web |title=Issue on IO's GitHub repository |url=https://github.com/pagopa/io-app/issues/6327}}</ref><ref>{{Cite web |title=/e/os user reports issues with IO on the e Foundation community |url=https://community.e.foundation/t/io-app-it-wallet-play-integrity-api-and-key-attestation/63555}}</ref><ref>{{Cite web |title=Users' reports in Google Play reviews of the IO app |url=https://play.google.com/store/apps/details?id=it.pagopa.io.app&hl=en-US}}</ref>

A more universally compatible solution to check the integrity of the device would be the standard Android [https://developer.android.com/privacy-and-security/security-key-attestation hardware attestation API], which would support non-Google alternative operating systems via the whitelisting of their keys.

==Impact==
The design choices of the IT-Wallet make it so that the service is only accessible to Italian citizens using one of two core services from Apple and Google, two foreign companies designated as gatekeepers by the EU Digital Markets Act.<ref name=":2" /><ref>{{Cite web |title=EU's designation decision on the AppStore |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100013_215.pdf}}</ref> Furthermore, Android users can only use the IT-Wallet if they have a Google-certified device and OS.

Distributing the app on Android via channels other than Google Play and performing integrity checks via the [https://developer.android.com/privacy-and-security/security-key-attestation hardware attestation API] instead of the Google Play Integrity API would enable users to access the service on alternative devices and operating systems, not restricting it to services with a dominant position in the market.

==References==
{{reflist}}
[[Category:Services]]
[[Category:Digital identity wallet]]
[[Category:PagoPA]]
[[Category:IO]]

User talk:Rampant-quack-painting

2025-08-24T22:37:00Z

Rampant-quack-painting: /* References */ Reply

==References==

Hello and thank you for writing [[The Italian digital identity wallet only supports Google-certified Android devices|this article]]. It is against wiki policy to use other wikis (Wikipedia, Fandom, Consumer Rights Wiki) as references using the <nowiki><ref></ref></nowiki> tags. [[Consumer_Rights_Wiki:Verifiability#What_should_be_used_with_caution|Please read this for more information]]. [[User:Mr Pollo|Mr Pollo]] ([[User talk:Mr Pollo|talk]]) 22:07, 24 August 2025 (UTC)

:Right, thanks for pointing that out. I see you already removed those. I've added a [https://www.pinsentmasons.com/out-law/news/rivals-claim-googles-deceptive-use-of-android-has-been-anti-competitive new reference] to replace an old one from Wikipedia [[User:Rampant-quack-painting|Rampant-quack-painting]] ([[User talk:Rampant-quack-painting|talk]]) 22:37, 24 August 2025 (UTC)

The Italian digital identity wallet only supports Google-certified Android devices

2025-08-24T22:32:16Z

Rampant-quack-painting: Fixed category name, added a reference

{{Stub}}
==Overview of IT-Wallet and its technical requirements==
"IO, l'app dei servizi pubblici" (IO hereinafter) is an app developed by PagoPA S.p.A., a State-owned enterprise which develops tools to make digital public services available in Italy.<ref>{{Cite web |title=About us page on PagoPA's website |url=https://www.pagopa.it/en/company/about-us/}}</ref> The app can be downloaded on Android and iOS.<ref>{{Cite web |title=IO F.A.Q.s on how to install the app |url=https://ioapp.it/domande-frequenti#come-installare-io}}</ref>

One of the services offered by IO is *Documenti su IO* (IT-Wallet hereinafter), a wallet containing digital identification documents<ref>{{Cite web |title=IO F.A.Q.s on what Documenti su IO is |url=https://ioapp.it/domande-frequenti#cose-documenti}}</ref>, as defined by the [https://digital-strategy.ec.europa.eu/en/policies/eidas-regulation eIDAS regulation].

To be able to access the IT-Wallet, the user needs to satisfy certain device integrity requirements, which the app's F.A.Q.s define as (translated from Italian)<ref name=":0" />:<blockquote>The device should not be compromised, that is, it should not be modified in such a way as to remove the security restrictions imposed by the operating system (for instance, jailbreak on iOS or rooting on Android). Furthermore, it is necessary that the app being executed is the official one, downloaded and signed from the Android and Apple stores (respectively, Play Store and App Store). </blockquote>On Android, these integrity requirements are checked with the Play Integrity API.<ref name=":0">{{Cite web |title=IO F.A.Q.s on technical requirements for the IT-Wallet |url=https://ioapp.it/domande-frequenti#requisiti-minimi}}</ref>

The distribution policy and the implementation of the integrity checks highlighted above pose two issues discussed in the next sections.

==Exclusive distribution on Google Play Store==
IO is distributed on Android exclusively via the Google Play Store, which may not be available on all devices<ref>{{Cite web |title=List of Android devices compatible with Google Play |url=https://storage.googleapis.com/play_public/supported_devices.html}}</ref> or the user may be running a non-Google licensed or non-Google compatible version of Android, which could not include the Play Store or may not even be [[wikipedia:Google_Play#Compatibility|eligible]] to include it. Moreover, users may wish not to install Google services on the device themselves in favor of alternatives.

Android devices are not only those running a version of the OS commercially licensed by Google to include the proprietary [[wikipedia:Google_Mobile_Services|Google Mobile Services]] (GMS), a collection of proprietary applications and APIs from Google, containing Google Play and Google Play services. Devices running Android versions based on or stemming from the [https://source.android.com/ Android Open Source Project] or devices produced by an OEM with an agreement with Google that does not include GMS should also be taken into consideration.

Manufacturers wishing to ship devices with GMS and the Play Store pre-installed are required to enter into an agreement with Google.<ref name=":1">{{Cite web |title=Appendix of report from the UK's Competition and Markets Authority |url=https://assets.publishing.service.gov.uk/media/61b794d6d3bf7f05545e1416/Appendix_E_-_Google_agreements_with_device_manufacturers_and_app_developers.pdf}}</ref> Google's position in the app distribution market can be seen as concerning for market competition<ref>{{Cite web |date=2013-04-10 |title=Rivals claim Google's 'deceptive' use of Android has been anti-competitive |url=https://www.pinsentmasons.com/out-law/news/rivals-claim-googles-deceptive-use-of-android-has-been-anti-competitive}}</ref>, as it could represent a barrier to emerging distribution channels and app stores.<ref name=":1" /> The European Union itself designated Alphabet (the parent holding company of Google) as a ''gatekeeper'' '''—''' a large digital platform providing core platform services, that needs to comply with specific regulations set forth in the Digital Markets Act '''—''' with respect to its Google Play platform.<ref name=":2">{{Cite web |title=EU's designation decision on Google Play |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100002_145.pdf}}</ref> One of the purposes of the DMA is to enforce the right of European citizens to have the choice to install preferred apps directly from the web or alternative app stores.<ref>{{Cite web |title=About the Digital Markets Act |url=https://digital-markets-act.ec.europa.eu/about-dma_en#what-does-this-mean-for-consumers}}</ref>

Note that the European Digital Identity Wallet Architecture and Framework Reference explicitly states that wallets can be made available "on other means than the official OS app store".<ref>{{Cite web |title=Section 6.5.2.2 of the EU Digital Identity Wallet Architecture and Framework Reference |url=https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/blob/main/docs/architecture-and-reference-framework-main.md}}</ref>

==Use of Play Integrity API==
The [[Google Play Integrity API]] is part of Google Play<ref>{{Cite web |title=Google Play Integrity terms |url=https://developer.android.com/google/play/integrity/terms}}</ref> and its strong integrity check is not compatible with devices running on alternative operating systems. This issue has been reported by the [https://grapheneos.org/ GrapheneOS] developers<ref>{{Cite web |title=GrapheneOS attestation compatibility guide |url=https://grapheneos.org/articles/attestation-compatibility-guide}}</ref> and by IO users.<ref>{{Cite web |title=Forum thread discussing lack of IT-Wallet support on GrapheneOS |url=https://forum.italia.it/t/grapheneos-e-documenti-su-io/43232/3}}</ref><ref>{{Cite web |title=Issue on IO's GitHub repository |url=https://github.com/pagopa/io-app/issues/6327}}</ref><ref>{{Cite web |title=/e/os user reports issues with IO on the e Foundation community |url=https://community.e.foundation/t/io-app-it-wallet-play-integrity-api-and-key-attestation/63555}}</ref><ref>{{Cite web |title=Users' reports in Google Play reviews of the IO app |url=https://play.google.com/store/apps/details?id=it.pagopa.io.app&hl=en-US}}</ref>

A more universally compatible solution to check the integrity of the device would be the standard Android [https://developer.android.com/privacy-and-security/security-key-attestation hardware attestation API], which would support non-Google alternative operating systems via the whitelisting of their keys.

==Conclusion==
The design choices of the IT-Wallet make it so that the service is only accessible to Italian citizens using one of two core services from Apple and Google, two foreign companies designated as gatekeepers by the EU Digital Markets Act.<ref name=":2" /><ref>{{Cite web |title=EU's designation decision on the AppStore |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100013_215.pdf}}</ref> Furthermore, Android users can only use the IT-Wallet if they have a Google-certified device and OS.

Distributing the app on Android via channels other than Google Play and performing integrity checks via the [https://developer.android.com/privacy-and-security/security-key-attestation hardware attestation API] instead of the Google Play Integrity API would enable users to access the service on alternative devices and operating systems, not restricting it to services with a dominant position in the market.

==References==
{{reflist}}
[[Category:Services]]
[[Category:Digital identity wallet]]
[[Category:PagoPA]]
[[Category:IO]]

The Italian digital identity wallet only supports Google-certified Android devices

2025-08-24T21:50:41Z

Rampant-quack-painting: Formatting

{{Stub}}
==Overview of IT-Wallet and its technical requirements==
"IO, l'app dei servizi pubblici" (IO hereinafter) is an app developed by PagoPA S.p.A., a State-owned enterprise which develops tools to make digital public services available in Italy.<ref>{{Cite web |title=About us page on PagoPA's website |url=https://www.pagopa.it/en/company/about-us/}}</ref> The app can be downloaded on Android and iOS.<ref>{{Cite web |title=IO F.A.Q.s on how to install the app |url=https://ioapp.it/domande-frequenti#come-installare-io}}</ref>

One of the services offered by IO is *Documenti su IO* (IT-Wallet hereinafter), a wallet containing digital identification documents<ref>{{Cite web |title=IO F.A.Q.s on what Documenti su IO is |url=https://ioapp.it/domande-frequenti#cose-documenti}}</ref>, as defined by the [https://digital-strategy.ec.europa.eu/en/policies/eidas-regulation eIDAS regulation].

To be able to access the IT-Wallet, the user needs to satisfy certain device integrity requirements, which the app's F.A.Q.s define as (translated from Italian)<ref name=":0" />:<blockquote>The device should not be compromised, that is, it should not be modified in such a way as to remove the security restrictions imposed by the operating system (for instance, jailbreak on iOS or rooting on Android). Furthermore, it is necessary that the app being executed is the official one, downloaded and signed from the Android and Apple stores (respectively, Play Store and App Store). </blockquote>On Android, these integrity requirements are checked with the Play Integrity API.<ref name=":0">{{Cite web |title=IO F.A.Q.s on technical requirements for the IT-Wallet |url=https://ioapp.it/domande-frequenti#requisiti-minimi}}</ref>

The distribution policy and the implementation of the integrity checks highlighted above pose two issues discussed in the next sections.

==Exclusive distribution on Google Play Store==
IO is distributed on Android exclusively via the Google Play Store, which may not be available on all devices<ref>{{Cite web |title=List of Android devices compatible with Google Play |url=https://storage.googleapis.com/play_public/supported_devices.html}}</ref> or the user may be running a non-Google licensed or non-Google compatible version of Android, which could not include the Play Store or may not even be eligible to include it.<ref>{{Cite web |title=Information page from Google's Help Center about Play Protect and eligibility to include the Play Store |url=https://support.google.com/googleplay/answer/7165974?sjid=7268413217596503139-EU}}</ref><ref>{{Cite web |title=Google Play: Compatibility on Wikipedia |url=https://en.wikipedia.org/wiki/Google_Play#Compatibility}}</ref> Moreover, users may wish not to install Google services on the device themselves in favor of alternatives.

Android devices are not only those running a version of the OS commercially licensed by Google<ref>{{Cite web |title=Wikipedia article on Android |url=https://en.wikipedia.org/wiki/Android_(operating_system)}}</ref> to include the proprietary [[wikipedia:Google_Mobile_Services|Google Mobile Services]] (GMS), a collection of proprietary applications and APIs from Google, containing Google Play and Google Play services. Devices running Android versions based on or stemming from the [https://source.android.com/ Android Open Source Project] or devices produced by an OEM with an agreement with Google that does not include GMS should also be taken into consideration.

Manufacturers wishing to ship devices with GMS and the Play Store pre-installed are required to enter into an agreement with Google.<ref name=":1">{{Cite web |title=Appendix of report from the UK's Competition and Markets Authority |url=https://assets.publishing.service.gov.uk/media/61b794d6d3bf7f05545e1416/Appendix_E_-_Google_agreements_with_device_manufacturers_and_app_developers.pdf}}</ref> Google's position in the app distribution market can be seen as concerning for market competition<ref>{{Cite web |title=Google Mobile Services: Reception, competitors, and regulators on Wikipedia |url=https://en.wikipedia.org/wiki/Google_Mobile_Services#Reception,_competitors,_and_regulators}}</ref> as they could represent a barrier to emerging distribution channels and app stores.<ref name=":1" /> The European Union itself designated Alphabet (the parent holding company of Google) as a ''gatekeeper'' '''—''' a large digital platform providing core platform services, that needs to comply with specific regulations set forth in the Digital Markets Act '''—''' with respect to its Google Play platform.<ref name=":2">{{Cite web |title=EU's designation decision on Google Play |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100002_145.pdf}}</ref> One of the purposes of the DMA is to enforce the right of European citizens to have the choice to install preferred apps directly from the web or alternative app stores.<ref>{{Cite web |title=About the Digital Markets Act |url=https://digital-markets-act.ec.europa.eu/about-dma_en#what-does-this-mean-for-consumers}}</ref>

Note that the European Digital Identity Wallet Architecture and Framework Reference explicitly states that wallets can be made available "on other means than the official OS app store".<ref>{{Cite web |title=Section 6.5.2.2 of the EU Digital Identity Wallet Architecture and Framework Reference |url=https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/blob/main/docs/architecture-and-reference-framework-main.md}}</ref>

==Use of Play Integrity API==
The [[Google Play Integrity API]] is part of Google Play<ref>{{Cite web |title=Google Play Integrity terms |url=https://developer.android.com/google/play/integrity/terms}}</ref> and its strong integrity check is not compatible with devices running on alternative operating systems.<ref>{{Cite web |title=Consumer Rights Wiki Google Play Integrity API page |url=https://consumerrights.wiki/Google_Play_Integrity_API}}</ref> This issue has been reported by the [https://grapheneos.org/ GrapheneOS] developers<ref>{{Cite web |title=GrapheneOS attestation compatibility guide |url=https://grapheneos.org/articles/attestation-compatibility-guide}}</ref> and by IO users.<ref>{{Cite web |title=Forum thread discussing lack of IT-Wallet support on GrapheneOS |url=https://forum.italia.it/t/grapheneos-e-documenti-su-io/43232/3}}</ref><ref>{{Cite web |title=Issue on IO's GitHub repository |url=https://github.com/pagopa/io-app/issues/6327}}</ref><ref>{{Cite web |title=/e/os user reports issues with IO on the e Foundation community |url=https://community.e.foundation/t/io-app-it-wallet-play-integrity-api-and-key-attestation/63555}}</ref><ref>{{Cite web |title=Users' reports in Google Play reviews of the IO app |url=https://play.google.com/store/apps/details?id=it.pagopa.io.app&hl=en-US}}</ref>

A more universally compatible solution to check the integrity of the device would be the standard Android [https://developer.android.com/privacy-and-security/security-key-attestation hardware attestation API], which would support non-Google alternative operating systems via the whitelisting of their keys.

==Conclusion==
The design choices of the IT-Wallet make it so that the service is only accessible to Italian citizens using one of two core services from Apple and Google, two foreign companies designated as gatekeepers by the EU Digital Markets Act.<ref name=":2" /><ref>{{Cite web |title=EU's designation decision on the AppStore |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100013_215.pdf}}</ref> Furthermore, Android users can only use the IT-Wallet if they have a Google-certified device and OS.

Distributing the app on Android via channels other than Google Play and performing integrity checks via the [https://developer.android.com/privacy-and-security/security-key-attestation hardware attestation API] instead of the Google Play Integrity API would enable users to access the service on alternative devices and operating systems, not restricting it to services with a dominant position in the market.

==References==
{{reflist}}
[[Category:Services]]
[[Category:Digital identity wallet]]

The Italian digital identity wallet only supports Google-certified Android devices

2025-08-24T21:47:30Z

Rampant-quack-painting: Formatting

{{Stub}}
==Overview of IT-Wallet and its technical requirements==
"IO, l'app dei servizi pubblici" (IO hereinafter) is an app developed by PagoPA S.p.A., a State-owned enterprise which develops tools to make digital public services available in Italy.<ref>{{Cite web |title=About us page on PagoPA's website |url=https://www.pagopa.it/en/company/about-us/}}</ref> The app can be downloaded on Android and iOS.<ref>{{Cite web |title=IO F.A.Q.s on how to install the app |url=https://ioapp.it/domande-frequenti#come-installare-io}}</ref>

One of the services offered by IO is *Documenti su IO* (IT-Wallet hereinafter), a wallet containing digital identification documents<ref>{{Cite web |title=IO F.A.Q.s on what Documenti su IO is |url=https://ioapp.it/domande-frequenti#cose-documenti}}</ref>, as defined by the [https://digital-strategy.ec.europa.eu/en/policies/eidas-regulation eIDAS regulation].

To be able to access the IT-Wallet, the user needs to satisfy certain device integrity requirements, which the app's F.A.Q.s define as (translated from Italian)<ref name=":0" />:<blockquote>The device should not be compromised, that is, it should not be modified in such a way as to remove the security restrictions imposed by the operating system (for instance, jailbreak on iOS or rooting on Android). Furthermore, it is necessary that the app being executed is the official one, downloaded and signed from the Android and Apple stores (respectively, Play Store and App Store). </blockquote>On Android, these integrity requirements are checked with the Play Integrity API.<ref name=":0">{{Cite web |title=IO F.A.Q.s on technical requirements for the IT-Wallet |url=https://ioapp.it/domande-frequenti#requisiti-minimi}}</ref>

The distribution policy and the implementation of the integrity checks highlighted above pose two issues discussed in the next sections.

==Exclusive distribution on Google Play Store==
IO is distributed on Android exclusively via the Google Play Store, which may not be available on all devices<ref>{{Cite web |title=List of Android devices compatible with Google Play |url=https://storage.googleapis.com/play_public/supported_devices.html}}</ref> or the user may be running a non-Google licensed or non-Google compatible version of Android, which could not include the Play Store or may not even be eligible to include it.<ref>{{Cite web |title=Information page from Google's Help Center about Play Protect and eligibility to include the Play Store |url=https://support.google.com/googleplay/answer/7165974?sjid=7268413217596503139-EU}}</ref><ref>{{Cite web |title=Google Play: Compatibility on Wikipedia |url=https://en.wikipedia.org/wiki/Google_Play#Compatibility}}</ref> Moreover, users may wish not to install Google services on the device themselves in favor of alternatives.

Android devices are not only those running a version of the OS commercially licensed by Google<ref>{{Cite web |title=Wikipedia article on Android |url=https://en.wikipedia.org/wiki/Android_(operating_system)}}</ref> to include the proprietary [<nowiki>https://en.wikipedia.org/wiki/Google_Mobile_Services</nowiki> Google Mobile Services] (GMS), a collection of proprietary applications and APIs from Google, containing Google Play and Google Play services. Devices running Android versions based on or stemming from the [<nowiki>https://source.android.com/</nowiki> Android Open Source Project] or devices produced by an OEM with an agreement with Google that does not include GMS should also be taken into consideration.

Manufacturers wishing to ship devices with GMS and the Play Store pre-installed are required to enter into an agreement with Google.<ref name=":1">{{Cite web |title=Appendix of report from the UK's Competition and Markets Authority |url=https://assets.publishing.service.gov.uk/media/61b794d6d3bf7f05545e1416/Appendix_E_-_Google_agreements_with_device_manufacturers_and_app_developers.pdf}}</ref> Google's position in the app distribution market can be seen as concerning for market competition<ref>{{Cite web |title=Google Mobile Services: Reception, competitors, and regulators on Wikipedia |url=https://en.wikipedia.org/wiki/Google_Mobile_Services#Reception,_competitors,_and_regulators}}</ref> as they could represent a barrier to emerging distribution channels and app stores.<ref name=":1" /> The European Union itself designated Alphabet (the parent holding company of Google) as a ''gatekeeper'' '''—''' a large digital platform providing core platform services, that needs to comply with specific regulations set forth in the Digital Markets Act '''—''' with respect to its Google Play platform.<ref name=":2">{{Cite web |title=EU's designation decision on Google Play |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100002_145.pdf}}</ref> One of the purposes of the >DMA is to enforce the right of European citizens to have the choice to install preferred apps directly from the web or alternative app stores.<ref>{{Cite web |title=About the Digital Markets Act |url=https://digital-markets-act.ec.europa.eu/about-dma_en#what-does-this-mean-for-consumers}}</ref>

Note that the European Digital Identity Wallet Architecture and Framework Reference explicitly states that wallets can be made available "on other means than the official OS app store".<ref>{{Cite web |title=Section 6.5.2.2 of the EU Digital Identity Wallet Architecture and Framework Reference |url=https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/blob/main/docs/architecture-and-reference-framework-main.md}}</ref>

==Use of Play Integrity API==
The [[Google Play Integrity API]] is part of Google Play<ref>{{Cite web |title=Google Play Integrity terms |url=https://developer.android.com/google/play/integrity/terms}}</ref> and its strong integrity check is not compatible with devices running on alternative operating systems.<ref>{{Cite web |title=Consumer Rights Wiki Google Play Integrity API page |url=https://consumerrights.wiki/Google_Play_Integrity_API}}</ref> This issue has been reported by the [GrapheneOS](<nowiki>https://grapheneos.org/</nowiki>) developers<ref>{{Cite web |title=GrapheneOS attestation compatibility guide |url=https://grapheneos.org/articles/attestation-compatibility-guide}}</ref> and by IO users.<ref>{{Cite web |title=Forum thread discussing lack of IT-Wallet support on GrapheneOS |url=https://forum.italia.it/t/grapheneos-e-documenti-su-io/43232/3}}</ref><ref>{{Cite web |title=Issue on IO's GitHub repository |url=https://github.com/pagopa/io-app/issues/6327}}</ref><ref>{{Cite web |title=/e/os user reports issues with IO on the e Foundation community |url=https://community.e.foundation/t/io-app-it-wallet-play-integrity-api-and-key-attestation/63555}}</ref><ref>{{Cite web |title=Users' reports in Google Play reviews of the IO app |url=https://play.google.com/store/apps/details?id=it.pagopa.io.app&hl=en-US}}</ref>

A more universally compatible solution to check the integrity of the device would be the standard Android [<nowiki>https://developer.android.com/privacy-and-security/security-key-attestation</nowiki> hardware attestation API], which would support non-Google alternative operating systems via the whitelisting of their keys.

==Conclusion==
The design choices of the IT-Wallet make it so that the service is only accessible to Italian citizens using one of two core services from Apple and Google, two foreign companies designated as gatekeepers by the EU Digital Markets Act.<ref name=":2" /><ref>{{Cite web |title=EU's designation decision on the AppStore |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100013_215.pdf}}</ref> Furthermore, Android users can only use the IT-Wallet if they have a Google-certified device and OS.

Distributing the app on Android via channels other than Google Play and performing integrity checks via the [<nowiki>https://developer.android.com/privacy-and-security/security-key-attestation</nowiki> hardware attestation API] instead of the Google Play Integrity API would enable users to access the service on alternative devices and operating systems, not restricting it to services with a dominant position in the market.

==References==
{{reflist}}
[[Category:Services]]
[[Category:Digital identity wallet]]

Consumer Rights Wiki talk:Moderators' noticeboard

2025-08-24T21:40:11Z

Rampant-quack-painting: /* Article status appeal: "The Italian digital identity wallet only supports Google-certified Android devices" */ new section

<div style="margin: {{#ifeq:{{{navbox|<noinclude>yes</noinclude>}}}|yes|2px}} 0 0.5em; padding: 0.5em; {{{style|border: 1px solid #A0A5AD;}}} {{{backgroundstyle|background-color: var(--background-color-progressive-subtle, #eaf3ff); color: inherit;}}}">
<div style="padding: 0.25em 0; text-align: center; font-size: 120%; border-radius: 3px; font-weight: bold; {{{titlestyle|background-color: var(--background-color-content-added, #aad1ff); color: inherit;}}}">Welcome — post issues of interest to Moderators</div>
*Post '''appeals''' to article notice templates (e.g. Incomplete, Stub, etc.)
*Post requests for '''moderator action''' here (e.g. blocks)
*Just need a mod? Post here or ping a mod with a question.
*Post any information or news relevant to the moderation team here.
*To request an article to be created, do not post here, try [[Article suggestions]] instead.
*Do not report technical issues here, please use the [[Consumer_Rights_Wiki_talk:Bugs|Bugs noticeboard]] instead.

<div style="padding: 0.25em 0; text-align: center; font-size: 150%; border-radius: 3px; font-weight: bold">[[Special:NewSection/Consumer Rights Wiki talk:Moderators' noticeboard|Start a new section]]</div>
</div>
<br />
{{Archives}} 
==Open tasks==

*[[:Category:Articles with deletion requests]]
*[[:Category:Articles with merge requests]]
*[[:Category:Articles marked as irrelevant]]
*[[Special:NewPages]]

==can this page be easily accessible (like from the left-side taskbar or something) ?==

I love the fact that you guys created this page ; i believe having less and less reliance on discord is a good thing, but currently this page is hidden deep and if you dont know it exists you will never find it. Please make it available easily in some way. [[User:Plankton|Plankton]] ([[User talk:Plankton|talk]]) 19:27, 20 August 2025 (UTC)

:Hi, thanks for posting this… I believe that is indeed the plan that we’re either going to add this to the policy page or the side bar or the help page. The team will discuss it and we will update you. [[User:Atsumari|Atsumari]] ([[User talk:Atsumari|talk]]) 19:29, 20 August 2025 (UTC)
:Done. I agree better visibility is important. '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 20:16, 20 August 2025 (UTC)
::Also, this page is linked to on all the article notice templates so it'll be easy to find when someone needs to come here. '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 21:01, 20 August 2025 (UTC)

==deletion request :==

this is difficult to explain because english is my second language but i believe some people have accidently written stuff in the wrong article. please check out [[Link to the main article|this article]] yourself, you will understand what i mean when reading the title and the content. [[User:Plankton|Plankton]] ([[User talk:Plankton|talk]]) 21:00, 20 August 2025 (UTC)

:Thanks for the report! I have removed the article for being written with AI. It is now protected so nobody can create an article with that title. [[User:Mr Pollo|Mr Pollo]] ([[User talk:Mr Pollo|talk]]) 21:51, 20 August 2025 (UTC)

==Request for comment: Transcript articles==

An editor has raised a question on the need for AI generated transcripts of Louis Rossmann videos being hosted on this site. It seems these articles have been around for a while and are in the guideline pages as okay to include. I don't feel strongly about these and I wanted to ask more broadly about the need. According to [[:Category:Transcripts]] we have about 20 of them.

Here is the comment in question that prompted me asking for feedback from others: [[Talk:Insta360 camera locks you out "to protect your consumer rights" - corporate gaslighting#why does this bs exist. why do these articles exist. can we stop ? this is so annoying. who wants this ??]] (pinging @[[User:Plankton|Plankton]]) '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 01:06, 21 August 2025 (UTC)

:yeah thats me. i apologize for the strong language in my original post on the talk page of the [[Insta360 camera locks you out "to protect your consumer rights" - corporate gaslighting|article]]. I just dont feel these articles are worth anything at all. I doubt anyone would ever read them. And their existance may even turn people down from writing their own article on the subject since one (though of poor quality) already exists. I dont know why they were allowed in the first place, but i feel like they should be removed. In my opinion, they bring down the quality of the wiki. If a gouvernment representative ever looks at the wiki for info and falls onto AI bs, they might not see the wiki as a quality documentation. [[User:Plankton|Plankton]] ([[User talk:Plankton|talk]]) 01:24, 21 August 2025 (UTC)
::I think you're right. They served a purpose to start with, but have outlived it. I'll do a proper purge of them and anything related to them shortly, starting with deleting those ones you linked just now [[User:Keith|Keith]] ([[User talk:Keith|talk]]) 10:44, 21 August 2025 (UTC)
:::Ok - I've deleted the transcripts which were on the site. I'll start the rest of the cleanup in a bit but in the meantime feel free to point out any references to them that need to go and I can mop them all up [[User:Keith|Keith]] ([[User talk:Keith|talk]]) 11:02, 21 August 2025 (UTC)
::::I assume [[Template:Autogenerated]] needs to go also? '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 15:00, 21 August 2025 (UTC)

==Am i allowed to make articles on legislature that is outside the US ?==

For the Legislature articles, are they only US centric ? or can I make articles on legislature from my country ? Moreover, do the sources cited need to be in english. Obviously the content of the page needs to be in english since this is an english wiki, but can the source be in other languages ? [[User:Plankton|Plankton]] ([[User talk:Plankton|talk]]) 22:25, 21 August 2025 (UTC)

:Consumer rights is a global issue. Yes, it is okay to include non-US issues and non-english sources, but it is preferable to find English sources. '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 22:52, 21 August 2025 (UTC)

==Hello dear moderators, please delete the page FTX i created==

So, At first i thought i should make an article on what happened with FTX and so i started a page. But after some thoughts i realised that the actual article I wanted to write is on the systemic issue of cryptocurrency fraud in general, and not simply on FTX. so can you guys please delete the FTX page i made ? [[User:Plankton|Plankton]] ([[User talk:Plankton|talk]]) 05:23, 22 August 2025 (UTC)

:If you want to keep the page and just have it converted to another name, we can do that that way it still aligns with the issue you’re trying to discuss. As long as it’s systemic and works with in the editorial guidelines, it doesn’t necessarily need to be deleted. If you still do want us to remove it, please let us know. The same thing it was for if you want more help with the article just feel free to let us know. [[User:Atsumari|Atsumari]] ([[User talk:Atsumari|talk]]) 11:53, 22 August 2025 (UTC)

==Deletion appeal "Presonus removes VSL...."==

Hello, I created a few days ago a page about Presonus deleting a software that was marketed with audio interfaces. I tried making changes on the page but the captcha just wouldn't trust that I was human and wouldn't let me add content to the article that's why it was empty.

It should now have some context and references, sorry for the inconvenience.

Best regards [[User:Leonneon|Leonneon]] ([[User talk:Leonneon|talk]]) 21:09, 22 August 2025 (UTC)

:I take it you're talking about this article [[Presonus removes VSL mixing app from VSL audio interfaces products line]] @[[User:Leonneon|Leonneon]]? I have removed the deletion notice. Thanks for making the article. '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 23:15, 22 August 2025 (UTC)

==Should CRW be indexed by search engines?==

Hello, I am writing here as I found a setting in the visual editor if you click those three lines and then ‘advanced settings’, which asks if you want a page to be indexed by search engines. I am sure that this setting is set to default, which means no on all articles (unless this was covered before and i do not know about it). I think this setting could be useful sometimes, but not always, to make the wiki easier to find and not just “I watch Louis Rossman so I know about the CRW!” and also make others learn about this in general. You can probably make a discussion about this if this wasn’t talked about before. [[User:AnotherConsumerRightsPerson|AnotherConsumerRightsPerson]] ([[User talk:AnotherConsumerRightsPerson|talk]]) 19:27, 23 August 2025 (UTC)

:@[[User:AnotherConsumerRightsPerson|AnotherConsumerRightsPerson]], I did a search (on Google) for "Microsoft consumer rights wiki" and this wiki did come up in the 3rd-4th result. So I am pretty sure this wiki is indexed by search engines. I'll forward this to developers just in case. '''''[[User:JackFromWisconsin|📎 JackFromWisconsin]]''''' ([[User_talk:JackFromWisconsin|talk]] | [[Special:Contributions/JackFromWisconsin|contribs]]) 02:17, 24 August 2025 (UTC)
::@[[User:JackFromWisconsin|JackFromWisconsin]] I searched this on Ecosia and I got the same thing too. [[User:AnotherConsumerRightsPerson|AnotherConsumerRightsPerson]] ([[User talk:AnotherConsumerRightsPerson|talk]]) 05:52, 24 August 2025 (UTC)

== Article status appeal: "The Italian digital identity wallet only supports Google-certified Android devices" ==

Hello,

I've created the article [[The Italian digital identity wallet only supports Google-certified Android devices]] today in a work-in-progress state and it was flagged as a stub. I think it's ready to lose the stub status now as I've published the final draft. Could you please check? Thanks [[User:Rampant-quack-painting|Rampant-quack-painting]] ([[User talk:Rampant-quack-painting|talk]]) 21:40, 24 August 2025 (UTC)

The Italian digital identity wallet only supports Google-certified Android devices

2025-08-24T19:03:24Z

Rampant-quack-painting: Removed "Add a category" notice

{{Stub}}
==Overview of IT-Wallet and its technical requirements==
"IO, l'app dei servizi pubblici" (IO hereinafter) is an app developed by PagoPA S.p.A., a State-owned enterprise which develops tools to make digital public services available in Italy.<ref>{{Cite web |title=About us page on PagoPA's website |url=https://www.pagopa.it/en/company/about-us/}}</ref> The app can be downloaded on Android and iOS.<ref>{{Cite web |title=IO F.A.Q.s on how to install the app |url=https://ioapp.it/domande-frequenti#come-installare-io}}</ref>

One of the services offered by IO is *Documenti su IO* (IT-Wallet hereinafter), a wallet containing digital identification documents<ref>{{Cite web |title=IO F.A.Q.s on what Documenti su IO is |url=https://ioapp.it/domande-frequenti#cose-documenti}}</ref>, as defined by the [https://digital-strategy.ec.europa.eu/en/policies/eidas-regulation eIDAS regulation].

To be able to access the IT-Wallet, the user needs to satisfy certain device integrity requirements, which the app's F.A.Q.s define as (translated from Italian)<ref name=":0" />:<blockquote>The device should not be compromised, that is, it should not be modified in such a way as to remove the security restrictions imposed by the operating system (for instance, jailbreak on iOS or rooting on Android). Furthermore, it is necessary that the app being executed is the official one, downloaded and signed from the Android and Apple stores (respectively, Play Store and App Store). </blockquote>On Android, these integrity requirements are checked with the Play Integrity API.<ref name=":0">{{Cite web |title=IO F.A.Q.s on technical requirements for the IT-Wallet |url=https://ioapp.it/domande-frequenti#requisiti-minimi}}</ref>

The distribution policy and the implementation of the integrity checks highlighted above pose two issues discussed in the next sections.

==Exclusive distribution on Google Play Store==
IO is distributed on Android exclusively via the Google Play Store, which may not be available on all devices<ref>{{Cite web |title=List of Android devices compatible with Google Play |url=https://storage.googleapis.com/play_public/supported_devices.html}}</ref> or the user may be running a non-Google licensed or non-Google compatible version of Android, which could not include the Play Store or may not even be eligible to include it.<ref>{{Cite web |title=Information page from Google's Help Center about Play Protect and eligibility to include the Play Store |url=https://support.google.com/googleplay/answer/7165974?sjid=7268413217596503139-EU}}</ref><ref>{{Cite web |title=Google Play: Compatibility on Wikipedia |url=https://en.wikipedia.org/wiki/Google_Play#Compatibility}}</ref> Moreover, users may wish not to install Google services on the device themselves in favor of alternatives.

Android devices are not only those running a version of the <nowiki><abbr title="Operating System">OS</abbr></nowiki> commercially licensed by Google<ref>{{Cite web |title=Wikipedia article on Android |url=https://en.wikipedia.org/wiki/Android_(operating_system)}}</ref> to include the proprietary [Google Mobile Services](<nowiki>https://en.wikipedia.org/wiki/Google_Mobile_Services</nowiki>) (GMS), a collection of proprietary applications and <nowiki><abbr title="Application programming interfaces">APIs</abbr></nowiki> from Google, containing Google Play and Google Play services. Devices running Android versions based on or stemming from the [Android Open Source Project](<nowiki>https://source.android.com/</nowiki>) or devices produced by an <nowiki><abbr title="Original equipment manufacturer">OEM</abbr></nowiki> with an agreement with Google that does not include <nowiki><abbr title="Google Mobile Services">GMS</abbr></nowiki> should also be taken into consideration.

Manufacturers wishing to ship devices with <nowiki><abbr title="Google Mobile Services">GMS</abbr></nowiki> and the Play Store pre-installed are required to enter into an agreement with Google.<ref name=":1">{{Cite web |title=Appendix of report from the UK's Competition and Markets Authority |url=https://assets.publishing.service.gov.uk/media/61b794d6d3bf7f05545e1416/Appendix_E_-_Google_agreements_with_device_manufacturers_and_app_developers.pdf}}</ref> Google's position in the app distribution market can be seen as concerning for market competition<ref>{{Cite web |title=Google Mobile Services: Reception, competitors, and regulators on Wikipedia |url=https://en.wikipedia.org/wiki/Google_Mobile_Services#Reception,_competitors,_and_regulators}}</ref> as they could represent a barrier to emerging distribution channels and app stores.<ref name=":1" /> The European Union itself designated Alphabet (the parent holding company of Google) as a ''gatekeeper'' '''—''' a large digital platform providing core platform services, that needs to comply with specific regulations set forth in the Digital Markets Act '''—''' with respect to its Google Play platform.<ref name=":2">{{Cite web |title=EU's designation decision on Google Play |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100002_145.pdf}}</ref> One of the purposes of the <nowiki><abbr title="Digital Markets Act">DMA</abbr></nowiki> is to enforce the right of European citizens to have the choice to install preferred apps directly from the web or alternative app stores.<ref>{{Cite web |title=About the Digital Markets Act |url=https://digital-markets-act.ec.europa.eu/about-dma_en#what-does-this-mean-for-consumers}}</ref>

Note that the European Digital Identity Wallet Architecture and Framework Reference explicitly states that wallets can be made available "on other means than the official OS app store".<ref>{{Cite web |title=Section 6.5.2.2 of the EU Digital Identity Wallet Architecture and Framework Reference |url=https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/blob/main/docs/architecture-and-reference-framework-main.md}}</ref>

==Use of Play Integrity API==
The [[Google Play Integrity API]] is part of Google Play<ref>{{Cite web |title=Google Play Integrity terms |url=https://developer.android.com/google/play/integrity/terms}}</ref> and its strong integrity check is not compatible with devices running on alternative operating systems.<ref>{{Cite web |title=Consumer Rights Wiki Google Play Integrity API page |url=https://consumerrights.wiki/Google_Play_Integrity_API}}</ref> This issue has been reported by the [GrapheneOS](<nowiki>https://grapheneos.org/</nowiki>) developers<ref>{{Cite web |title=GrapheneOS attestation compatibility guide |url=https://grapheneos.org/articles/attestation-compatibility-guide}}</ref> and by IO users.<ref>{{Cite web |title=Forum thread discussing lack of IT-Wallet support on GrapheneOS |url=https://forum.italia.it/t/grapheneos-e-documenti-su-io/43232/3}}</ref><ref>{{Cite web |title=Issue on IO's GitHub repository |url=https://github.com/pagopa/io-app/issues/6327}}</ref><ref>{{Cite web |title=/e/os user reports issues with IO on the e Foundation community |url=https://community.e.foundation/t/io-app-it-wallet-play-integrity-api-and-key-attestation/63555}}</ref><ref>{{Cite web |title=Users' reports in Google Play reviews of the IO app |url=https://play.google.com/store/apps/details?id=it.pagopa.io.app&hl=en-US}}</ref>

A more universally compatible solution to check the integrity of the device would be the standard Android [hardware attestation API](<nowiki>https://developer.android.com/privacy-and-security/security-key-attestation</nowiki>), which would support non-Google alternative operating systems via the whitelisting of their keys.

==Conclusion==
The design choices of the IT-Wallet make it so that the service is only accessible to Italian citizens using one of two core services from Apple and Google, two foreign companies designated as gatekeepers by the EU Digital Markets Act.<ref name=":2" /><ref>{{Cite web |title=EU's designation decision on the AppStore |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100013_215.pdf}}</ref> Furthermore, Android users can only use the IT-Wallet if they have a Google-certified device and <nowiki><abbr title="Operating System">OS</abbr></nowiki>.

Distributing the app on Android via channels other than Google Play and performing integrity checks via the [hardware attestation API](<nowiki>https://developer.android.com/privacy-and-security/security-key-attestation</nowiki>) instead of the Google Play Integrity API would enable users to access the service on alternative devices and operating systems, not restricting it to services with a dominant position in the market.

==References==
{{reflist}}
[[Category:Services]]
[[Category:Digital identity wallet]]

The Italian digital identity wallet only supports Google-certified Android devices

2025-08-24T19:02:46Z

Rampant-quack-painting: Final draft, ready for evaluation by admins

{{Stub}}
==Overview of IT-Wallet and its technical requirements==
"IO, l'app dei servizi pubblici" (IO hereinafter) is an app developed by PagoPA S.p.A., a State-owned enterprise which develops tools to make digital public services available in Italy.<ref>{{Cite web |title=About us page on PagoPA's website |url=https://www.pagopa.it/en/company/about-us/}}</ref> The app can be downloaded on Android and iOS.<ref>{{Cite web |title=IO F.A.Q.s on how to install the app |url=https://ioapp.it/domande-frequenti#come-installare-io}}</ref>

One of the services offered by IO is *Documenti su IO* (IT-Wallet hereinafter), a wallet containing digital identification documents<ref>{{Cite web |title=IO F.A.Q.s on what Documenti su IO is |url=https://ioapp.it/domande-frequenti#cose-documenti}}</ref>, as defined by the [https://digital-strategy.ec.europa.eu/en/policies/eidas-regulation eIDAS regulation].

To be able to access the IT-Wallet, the user needs to satisfy certain device integrity requirements, which the app's F.A.Q.s define as (translated from Italian)<ref name=":0" />:<blockquote>The device should not be compromised, that is, it should not be modified in such a way as to remove the security restrictions imposed by the operating system (for instance, jailbreak on iOS or rooting on Android). Furthermore, it is necessary that the app being executed is the official one, downloaded and signed from the Android and Apple stores (respectively, Play Store and App Store). </blockquote>On Android, these integrity requirements are checked with the Play Integrity API.<ref name=":0">{{Cite web |title=IO F.A.Q.s on technical requirements for the IT-Wallet |url=https://ioapp.it/domande-frequenti#requisiti-minimi}}</ref>

The distribution policy and the implementation of the integrity checks highlighted above pose two issues discussed in the next sections.

==Exclusive distribution on Google Play Store==
IO is distributed on Android exclusively via the Google Play Store, which may not be available on all devices<ref>{{Cite web |title=List of Android devices compatible with Google Play |url=https://storage.googleapis.com/play_public/supported_devices.html}}</ref> or the user may be running a non-Google licensed or non-Google compatible version of Android, which could not include the Play Store or may not even be eligible to include it.<ref>{{Cite web |title=Information page from Google's Help Center about Play Protect and eligibility to include the Play Store |url=https://support.google.com/googleplay/answer/7165974?sjid=7268413217596503139-EU}}</ref><ref>{{Cite web |title=Google Play: Compatibility on Wikipedia |url=https://en.wikipedia.org/wiki/Google_Play#Compatibility}}</ref> Moreover, users may wish not to install Google services on the device themselves in favor of alternatives.

Android devices are not only those running a version of the <nowiki><abbr title="Operating System">OS</abbr></nowiki> commercially licensed by Google<ref>{{Cite web |title=Wikipedia article on Android |url=https://en.wikipedia.org/wiki/Android_(operating_system)}}</ref> to include the proprietary [Google Mobile Services](<nowiki>https://en.wikipedia.org/wiki/Google_Mobile_Services</nowiki>) (GMS), a collection of proprietary applications and <nowiki><abbr title="Application programming interfaces">APIs</abbr></nowiki> from Google, containing Google Play and Google Play services. Devices running Android versions based on or stemming from the [Android Open Source Project](<nowiki>https://source.android.com/</nowiki>) or devices produced by an <nowiki><abbr title="Original equipment manufacturer">OEM</abbr></nowiki> with an agreement with Google that does not include <nowiki><abbr title="Google Mobile Services">GMS</abbr></nowiki> should also be taken into consideration.

Manufacturers wishing to ship devices with <nowiki><abbr title="Google Mobile Services">GMS</abbr></nowiki> and the Play Store pre-installed are required to enter into an agreement with Google.<ref name=":1">{{Cite web |title=Appendix of report from the UK's Competition and Markets Authority |url=https://assets.publishing.service.gov.uk/media/61b794d6d3bf7f05545e1416/Appendix_E_-_Google_agreements_with_device_manufacturers_and_app_developers.pdf}}</ref> Google's position in the app distribution market can be seen as concerning for market competition<ref>{{Cite web |title=Google Mobile Services: Reception, competitors, and regulators on Wikipedia |url=https://en.wikipedia.org/wiki/Google_Mobile_Services#Reception,_competitors,_and_regulators}}</ref> as they could represent a barrier to emerging distribution channels and app stores.<ref name=":1" /> The European Union itself designated Alphabet (the parent holding company of Google) as a ''gatekeeper'' '''—''' a large digital platform providing core platform services, that needs to comply with specific regulations set forth in the Digital Markets Act '''—''' with respect to its Google Play platform.<ref name=":2">{{Cite web |title=EU's designation decision on Google Play |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100002_145.pdf}}</ref> One of the purposes of the <nowiki><abbr title="Digital Markets Act">DMA</abbr></nowiki> is to enforce the right of European citizens to have the choice to install preferred apps directly from the web or alternative app stores.<ref>{{Cite web |title=About the Digital Markets Act |url=https://digital-markets-act.ec.europa.eu/about-dma_en#what-does-this-mean-for-consumers}}</ref>

Note that the European Digital Identity Wallet Architecture and Framework Reference explicitly states that wallets can be made available "on other means than the official OS app store".<ref>{{Cite web |title=Section 6.5.2.2 of the EU Digital Identity Wallet Architecture and Framework Reference |url=https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/blob/main/docs/architecture-and-reference-framework-main.md}}</ref>

==Use of Play Integrity API==
The [[Google Play Integrity API]] is part of Google Play<ref>{{Cite web |title=Google Play Integrity terms |url=https://developer.android.com/google/play/integrity/terms}}</ref> and its strong integrity check is not compatible with devices running on alternative operating systems.<ref>{{Cite web |title=Consumer Rights Wiki Google Play Integrity API page |url=https://consumerrights.wiki/Google_Play_Integrity_API}}</ref> This issue has been reported by the [GrapheneOS](<nowiki>https://grapheneos.org/</nowiki>) developers<ref>{{Cite web |title=GrapheneOS attestation compatibility guide |url=https://grapheneos.org/articles/attestation-compatibility-guide}}</ref> and by IO users.<ref>{{Cite web |title=Forum thread discussing lack of IT-Wallet support on GrapheneOS |url=https://forum.italia.it/t/grapheneos-e-documenti-su-io/43232/3}}</ref><ref>{{Cite web |title=Issue on IO's GitHub repository |url=https://github.com/pagopa/io-app/issues/6327}}</ref><ref>{{Cite web |title=/e/os user reports issues with IO on the e Foundation community |url=https://community.e.foundation/t/io-app-it-wallet-play-integrity-api-and-key-attestation/63555}}</ref><ref>{{Cite web |title=Users' reports in Google Play reviews of the IO app |url=https://play.google.com/store/apps/details?id=it.pagopa.io.app&hl=en-US}}</ref>

A more universally compatible solution to check the integrity of the device would be the standard Android [hardware attestation API](<nowiki>https://developer.android.com/privacy-and-security/security-key-attestation</nowiki>), which would support non-Google alternative operating systems via the whitelisting of their keys.

==Conclusion==
The design choices of the IT-Wallet make it so that the service is only accessible to Italian citizens using one of two core services from Apple and Google, two foreign companies designated as gatekeepers by the EU Digital Markets Act.<ref name=":2" /><ref>{{Cite web |title=EU's designation decision on the AppStore |url=https://ec.europa.eu/competition/digital_markets_act/cases/202344/DMA_100013_215.pdf}}</ref> Furthermore, Android users can only use the IT-Wallet if they have a Google-certified device and <nowiki><abbr title="Operating System">OS</abbr></nowiki>.

Distributing the app on Android via channels other than Google Play and performing integrity checks via the [hardware attestation API](<nowiki>https://developer.android.com/privacy-and-security/security-key-attestation</nowiki>) instead of the Google Play Integrity API would enable users to access the service on alternative devices and operating systems, not restricting it to services with a dominant position in the market.

==References==
{{reflist}}

{{Ph-I-C}}
[[Category:Services]]
[[Category:Digital identity wallet]]

The Italian digital identity wallet only supports Google-certified Android devices

2025-08-24T15:03:34Z

Rampant-quack-painting:

==Overview of IT-Wallet and its technical requirements==
"IO, l'app dei servizi pubblici" (IO hereinafter) is an app developed by PagoPA S.p.A., a State-owned enterprise which develops tools to make digital public services available in Italy.<ref>{{Cite web |title=About us page on PagoPA's website |url=https://www.pagopa.it/en/company/about-us/}}</ref> The app can be downloaded on Android and iOS.<ref>{{Cite web |title=IO F.A.Q.s on how to install the app |url=https://ioapp.it/domande-frequenti#come-installare-io}}</ref>

One of the services offered by IO is *Documenti su IO* (IT-Wallet hereinafter), a wallet containing digital identification documents<ref>{{Cite web |title=IO F.A.Q.s on what Documenti su IO is |url=https://ioapp.it/domande-frequenti#cose-documenti}}</ref>, as defined by the [eIDAS regulation](<nowiki>https://digital-strategy.ec.europa.eu/en/policies/eidas-regulation</nowiki>).

To be able to access the IT-Wallet, the user needs to satisfy certain device integrity requirements, which the app's F.A.Q.s define as (translated from Italian)[^4]:

> The device should not be compromised, that is, it should not be modified in such a way as to remove the security restrictions imposed by the operating system (for instance, jailbreak on iOS or rooting on Android). Furthermore, it is necessary that the app being executed is the official one, downloaded and signed from the Android and Apple stores (respectively, Play Store and App Store).

On Android, these integrity requirements are checked with the Play Integrity API.<ref>{{Cite web |title=IO F.A.Q.s on technical requirements for the IT-Wallet |url=https://ioapp.it/domande-frequenti#requisiti-minimi}}</ref>

The distribution policy and the implementation of the integrity checks highlighted above pose two issues discussed in the next sections.

==Exclusive distribution on Google Play Store==
work in progress

==Use of Play Integrity API==
work in progress

==Conclusion==
work in progress

==References==
{{reflist}}

{{Ph-I-C}}

The Italian digital identity wallet only supports Google-certified Android devices

2025-08-24T14:45:39Z

Rampant-quack-painting: The design choices of the IT-Wallet make it only accessible to citizens using either the App Store (for Apple devices) or Google Play Store (for Android devices). Android users that download the app from the Play Store, cannot use the IT-Wallet anyway unless their device is Google-certified, practically forbidding the use to aftermarket OSes and other non Google-certified devices.

{{IncidentCargo
|Company=Google, PagoPA
|StartDate=2024-10-23
|Status=Active
|ProductLine=Digital identity wallet
|Product=IO l'app dei servizi pubblici
|ArticleType=Service
|Type=Digital restrictions, Erosion of rights
|Description=Access to the IT-Wallet is restricted to Android users that have a Google-certified Android device and download it from the Google Play Store
}}
{{Ph-I-Int}}
==Background==
{{Ph-I-B}}

==[Incident]==
{{Ph-I-I}}

===[Company]'s response===
{{Ph-I-ComR}}

==Lawsuit==
{{Ph-I-L}}

==Consumer response==
{{Ph-I-ConR}}

==References==
{{reflist}}

{{Ph-I-C}}