MitID: Difference between revisions
m clean up. incomplete notice |
m many links; code fmt; ref-need->cite-need |
||
| (3 intermediate revisions by 3 users not shown) | |||
| Line 1: | Line 1: | ||
{{Incomplete|Issue 1=Missing section of consumer response}} | {{Incomplete|Issue 1=Missing section of consumer response}} | ||
MitID app blocked on custom ROMs | MitID app blocked on [[wikipedia:List_of_custom_Android_distributions|custom ROMs]] (e.g. [[GrapheneOS]]/CalyxOS/[[wikipedia:LineageOS|LineageOS]]) since June 2024 due to [[Google]] API changes. The MitID app, Denmark's national digital ID, now fails activation on custom Android ROMs, displaying a "rooted or compromised" error due to new [[Google Play Integrity API]] requirements.<ref name="grapheneos-issue1609">https://github.com/GrapheneOS/os-issue-tracker/issues/1609 ([http://web.archive.org/web/20231119200107/https://github.com/GrapheneOS/os-issue-tracker/issues/1609 Archived])</ref><ref name="grapheneos-discuss">https://discuss.grapheneos.org/d/1520-status-of-mitid-app ([http://web.archive.org/web/20251219205457/https://discuss.grapheneos.org/d/1520-status-of-mitid-app/ Archived])</ref> | ||
{{IncidentCargo | {{IncidentCargo | ||
|Company=Google | |Company=Google | ||
| Line 12: | Line 12: | ||
}} | }} | ||
==Background== | ==Background== | ||
MitID is Denmark's national electronic ID system, primarily a smartphone and tablet app that serves as a personal digital key for secure login and digital signatures in public and private self-service solutions, such as accessing government services (e.g., skat.dk, borger.dk), online banking, and confirming online actions with a swipe.<ref name="norden">https://www.norden.org/en/info-norden/electronic-id-denmark-mitid</ref><ref name="borger">https://lifeindenmark.borger.dk/apps-and-digital-services/mitid</ref><ref name="digst">https://en.digst.dk/systems/mitid/</ref><ref name="mitid-about">https://www.mitid.dk/en-gb/about-mitid/</ref> Alternatives include code viewers or chips for those unable to use the app.<ref name="borger" /> In past similar incidents (e.g., a 2022-2023 outage), people contacted MitID developers directly, leading to quick fixes, but no such resolution has been reported for the current API-related block.<ref name="grapheneos-discuss" /> User complaints on platforms like Trustpilot highlight frustration with the app's security checks blocking non-standard devices, but official support responses focus on unrelated issues, such as language settings errors, without acknowledging or promising fixes for custom ROM users.<ref name="trustpilot">https://www.trustpilot.com/review/mitid.dk</ref> As a result, new activations remain impossible on uncertified ROMs, while pre-existing ones continue to function temporarily.<ref name="grapheneos-discuss" /> | MitID is Denmark's national electronic ID system, primarily a smartphone and tablet app that serves as a personal digital key for secure login and digital signatures in public and private self-service solutions, such as accessing government services (e.g., <code>skat.dk</code>, <code>borger.dk</code>), online banking, and confirming online actions with a swipe.<ref name="norden">https://www.norden.org/en/info-norden/electronic-id-denmark-mitid ([http://web.archive.org/web/20250617103157/https://www.norden.org/en/info-norden/electronic-id-denmark-mitid Archived])</ref><ref name="borger">https://lifeindenmark.borger.dk/apps-and-digital-services/mitid ([http://web.archive.org/web/20251128130923/https://lifeindenmark.borger.dk/apps-and-digital-services/mitid Archived])</ref><ref name="digst">https://en.digst.dk/systems/mitid/ ([http://web.archive.org/web/20251210115316/https://en.digst.dk/systems/mitid/ Archived])</ref><ref name="mitid-about">https://www.mitid.dk/en-gb/about-mitid/ ([http://web.archive.org/web/20260105062033/https://www.mitid.dk/en-gb/about-mitid/ Archived])</ref> Alternatives include code viewers or chips for those unable to use the app.<ref name="borger" /> In past similar incidents (e.g., a 2022-2023 outage), people contacted MitID developers directly, leading to quick fixes, but no such resolution has been reported for the current API-related block.<ref name="grapheneos-discuss" /> User complaints on platforms like Trustpilot highlight frustration with the app's security checks blocking non-standard devices, but official support responses focus on unrelated issues, such as language settings errors, without acknowledging or promising fixes for custom ROM users.<ref name="trustpilot">https://www.trustpilot.com/review/mitid.dk ([http://web.archive.org/web/20250214091102/https://www.trustpilot.com/review/mitid.dk Archived])</ref> As a result, new activations remain impossible on uncertified ROMs, while pre-existing ones continue to function temporarily.<ref name="grapheneos-discuss" /> | ||
==Incident== | ==Incident== | ||
Since June 12, 2024, MitID has enforced Google Play Integrity API checks during activation, which custom ROMs like GrapheneOS fail as they are not Google-certified.<ref name="lbschenkel">https://gist.github.com/lbschenkel/4199be415f2a139b64688ae74c92a7fc</ref><ref name="grapheneos-discuss" /> Pre-existing activations may still work, but new ones do not.<ref name="grapheneos-discuss" /> The MitID app displays an error claiming the device is "rooted or compromised," preventing activation, as it fails the Google Play Integrity/SafetyNet checks required for verification.<ref name="grapheneos-issue1609" /><ref name="grapheneos-discuss274">https://discuss.grapheneos.org/d/1520-status-of-mitid-app/274</ref> | Since June 12, 2024, MitID has enforced Google Play Integrity API checks during activation, which custom ROMs like GrapheneOS fail as they are not Google-certified.<ref name="lbschenkel">https://gist.github.com/lbschenkel/4199be415f2a139b64688ae74c92a7fc ([http://web.archive.org/web/20251219190616/https://gist.github.com/lbschenkel/4199be415f2a139b64688ae74c92a7fc Archived])</ref><ref name="grapheneos-discuss" /> Pre-existing activations may still work, but new ones do not.<ref name="grapheneos-discuss" /> The MitID app displays an error claiming the device is "rooted or compromised," preventing activation, as it fails the Google Play Integrity/SafetyNet checks required for verification.<ref name="grapheneos-issue1609" /><ref name="grapheneos-discuss274">https://discuss.grapheneos.org/d/1520-status-of-mitid-app/274 ([http://web.archive.org/web/20251219205457/https://discuss.grapheneos.org/d/1520-status-of-mitid-app/ Archived])</ref> | ||
===Company Responses=== | ===Company Responses=== | ||
====MitID (Digitaliseringsstyrelsen)==== | ====MitID (Digitaliseringsstyrelsen)==== | ||
Digitaliseringsstyrelsen has not issued a public statement addressing the MitID app's incompatibility with custom ROMs due to Google Play Integrity API enforcement since June 12, 2024.<ref name="trustpilot" /> Support responses focus on unrelated issues, and no fix has been promised for new activations on uncertified devices, though pre-existing setups may work temporarily.<ref name="trustpilot" /><ref name="grapheneos-discuss" /> | Digitaliseringsstyrelsen has not issued a public statement addressing the MitID app's incompatibility with custom ROMs due to Google Play Integrity API enforcement since June 12, 2024.<ref name="trustpilot" /> Support responses focus on unrelated issues, and no fix has been promised for new activations on uncertified devices, though pre-existing setups may work temporarily.<ref name="trustpilot" /><ref name="grapheneos-discuss" /> | ||
''(from one of the custom ROM forums a person mentioned that they did send a request for this issue, and the response received was that it won't be prioritised because of the small market share | ''(from one of the custom ROM forums a person mentioned that they did send a request for this issue, and the response received was that it won't be prioritised because of the small market share)''{{Citation needed}} | ||
| Line 30: | Line 30: | ||
==References== | ==References== | ||
<references> | <references> | ||
<ref name="norden">https://www.norden.org/en/info-norden/electronic-id-denmark-mitid</ref> | <ref name="norden">https://www.norden.org/en/info-norden/electronic-id-denmark-mitid ([http://web.archive.org/web/20250617103157/https://www.norden.org/en/info-norden/electronic-id-denmark-mitid Archived])</ref> | ||
<ref name="borger">https://lifeindenmark.borger.dk/apps-and-digital-services/mitid</ref> | <ref name="borger">https://lifeindenmark.borger.dk/apps-and-digital-services/mitid ([http://web.archive.org/web/20251128130923/https://lifeindenmark.borger.dk/apps-and-digital-services/mitid Archived])</ref> | ||
<ref name="digst">https://en.digst.dk/systems/mitid/</ref> | <ref name="digst">https://en.digst.dk/systems/mitid/ ([http://web.archive.org/web/20251210115316/https://en.digst.dk/systems/mitid/ Archived])</ref> | ||
<ref name="mitid-about">https://www.mitid.dk/en-gb/about-mitid/</ref> | <ref name="mitid-about">https://www.mitid.dk/en-gb/about-mitid/ ([http://web.archive.org/web/20260105062033/https://www.mitid.dk/en-gb/about-mitid/ Archived])</ref> | ||
<ref name="trustpilot">https://www.trustpilot.com/review/mitid.dk</ref> | <ref name="trustpilot">https://www.trustpilot.com/review/mitid.dk ([http://web.archive.org/web/20250214091102/https://www.trustpilot.com/review/mitid.dk Archived])</ref> | ||
<ref name="lbschenkel">https://gist.github.com/lbschenkel/4199be415f2a139b64688ae74c92a7fc</ref> | <ref name="lbschenkel">https://gist.github.com/lbschenkel/4199be415f2a139b64688ae74c92a7fc ([http://web.archive.org/web/20251219190616/https://gist.github.com/lbschenkel/4199be415f2a139b64688ae74c92a7fc Archived])</ref> | ||
<ref name="grapheneos-discuss">https://discuss.grapheneos.org/d/1520-status-of-mitid-app</ref> | <ref name="grapheneos-discuss">https://discuss.grapheneos.org/d/1520-status-of-mitid-app ([http://web.archive.org/web/20251219205457/https://discuss.grapheneos.org/d/1520-status-of-mitid-app/ Archived])</ref> | ||
<ref name="grapheneos-issue1609">https://github.com/GrapheneOS/os-issue-tracker/issues/1609</ref> | <ref name="grapheneos-issue1609">https://github.com/GrapheneOS/os-issue-tracker/issues/1609 ([http://web.archive.org/web/20231119200107/https://github.com/GrapheneOS/os-issue-tracker/issues/1609 Archived])</ref> | ||
<ref name="grapheneos-discuss274">https://discuss.grapheneos.org/d/1520-status-of-mitid-app/274</ref> | <ref name="grapheneos-discuss274">https://discuss.grapheneos.org/d/1520-status-of-mitid-app/274 ([http://web.archive.org/web/20251219205457/https://discuss.grapheneos.org/d/1520-status-of-mitid-app/ Archived])</ref> | ||
<ref name="reddit-dktechsupport">https://www.reddit.com/r/dktechsupport/comments/1j8ps28/er_der_nogen_med_grapheneos_som_har_en_funktionel/</ref> | <ref name="reddit-dktechsupport">https://www.reddit.com/r/dktechsupport/comments/1j8ps28/er_der_nogen_med_grapheneos_som_har_en_funktionel/</ref> | ||
</references> | </references> | ||
{{Ph-I-C}} | {{Ph-I-C}} | ||
[[Category:Scandinavian incidents]] | |||