security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

add Widevine provisioning to other connections

Browse Source
This commit is contained in:
matchboxbananasynergy 2024-02-02 00:04:37 +00:00 committed by Daniel Micay
parent 129a23c997
commit a3918be58d
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
static/faq.html
View File

@ -1117,6 +1117,17 @@
could hard-wire domains as verified if they did and we wanted to avoid more
default connections.</p>
<p>GrapheneOS uses
https://widevineprovisioning.grapheneos.org/certificateprovisioning/v1/devicecertificates/create
by default which is a private reverse proxy to
https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create
as part of Widevine provisioning. This is another form of key provisioning for
per-app keys that are used when playing DRM protected media. DRM support is
enabled in the OS by default but we don't include any apps using it by default,
since it's disabled in Vanadium. A setting is added at Settings ➔ Network &amp;
Internet ➔ Widevine provisioning for switching to directly using the Google
service if you prefer.</p>
<p>Most other connections made by the OS itself are made based on your chosen
carrier. The OS has a database of APN and other carrier configuration settings
which determines how this works by default. Normally, carriers can force their