Apple's iOS 27 Blocklist Hands Apple a Chokepoint Over the Open Web

On 29 September, AdExchanger reported that Apple had added the domains of identity vendors Audigent, ID5, Permutive and The Trade Desk's UID2.0 to a blocklist in iOS 27 and macOS 27, under its "war on fingerprinting". The Trade Desk's primary ad-request domain, adsrvr.org, was blocked too, which Alan Chapell, president of Chapell & Associates and regulatory analyst for The Monopoly Report, writes effectively cut The Trade Desk's access to Safari ad inventory on iOS 27. The adsrvr.org block has since been lifted, but Chapell argues the episode is not a mistake but "a shot across the bow at adtechs who dare operate on Safari". His core charge is that privacy is the cover, not the motive: "creating a system by which content creators' only choice is paid subscriptions, and charging a 30% vig on those paid subs, isn't protecting anyone but Apple." He notes that Google is conspicuously absent from Apple's blocklist, despite Apple's years of privacy criticism aimed at Google, and that Apple is simultaneously building out its own advertising programme.

The crux

A browser vendor can now unilaterally sever a publisher's identity and demand infrastructure on its own operating system, and the only appeal mechanism is Apple's private judgement; the open web's supply path is now contingent on the goodwill of the platform that also competes with it.

Sell-side read

Publishers whose Safari yield leans on UID2, ID5, LiveRamp or Permutive are now carrying inventory that cannot be addressed on iOS 27; the ones insulated are those with logged-in first-party identity (email, PPID) that does not ride a third-party ID vendor.

Watch

whether the adsrvr.org fix ships to all users by end of October, and whether Apple extends the blocklist to the "hundreds" of programmatic data companies it has signalled.