Our great sponsors
-
mobile-mba-androidapp
2013 Measuring Broadband America Program Mobile Measurement Android Application
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
Fingerprinting something like this would be trivial, they've probably already done it. Using the ja3 library [1] you can make pretty good deterministic TLS connection fingerprints, and that works fine for traffic that you can't decrypt. IDS/IPS software has used similar methods to identify and block encrypted traffic for some time now.
There is no reason this app should NOT be opensourced. They should be defaulting to open per Play 13 of the US Digital Service handbook > https://playbook.cio.gov/#play13.