Apple Kills Identity Resolution in Safari: The Cookie's Last Stand

Apple has confirmed it broke identity resolution companies' ability to track users across Safari, in a blog post this week that formalized what industry insiders already suspected. The disclosure is the latest strike in a long-running contest between Apple and the advertising ecosystem, and by most expert accounts the outcome is not close.

Safari now blocks cookies with short expiration dates outright. Apple has also moved against CNAME cloaking and other techniques advertisers use to triangulate identity without cookies at all. Each workaround the ad tech industry has engineered has drawn a targeted response from Cupertino.

What does Apple's move actually change?

Zach Edwards, founder of DecryptAds and an ad tech and cybersecurity researcher, says the power asymmetry is decisive. "It's a cat and mouse game," Edwards said. "And the cat can see basically everything the mouse is doing, and is just slowly putting their pieces in place to block that mouse in whatever escape route they've planned."

Some technical workarounds may still function today. Edwards does not rate any of them as durable. Nothing currently in the market, in his assessment, lies beyond Apple's ability to block. His prescription for the industry is blunt: ad tech needs to get serious about consent and adopt safer identity schemes rather than keep chasing evasion techniques.

The takeaway in plain words: identity resolution as a third-party tracking business is following third-party cookies toward extinction, and no vendor has a fix Apple cannot break.

Where do 2,100 AI slop sites fit in?

The same week, DecryptAds published a report identifying 2,100 AI slop sites that had forged connections into programmatic ad supply. Brands buying through open exchanges may not have realized their ads were running next to AI-generated recipes attributed to fake chefs and other doctored authors.

The pattern will feel familiar to anyone who has watched ad tech's quality problems recur. Made-for-advertising sites, toolbars, ad fraud and content farms all share one design: websites built to profit from display ads without investing in quality content.

Google Search has drawn its own line, coming out against what it calls "deceptive authorship" — content that tricks readers into believing a person wrote it rather than a machine. There is a healthy debate about the value of AI-generated content generally. Forging human bylines sits outside that debate.

Why is AI slop harder to stop than MFA?

Edwards warns that the familiar playbook will not transfer cleanly, because the scale problem is compounding. "MFA websites are growing much faster than people are slowing them down," he said.

AI generation removes the last production bottleneck. A content farm once needed writers; a slop farm needs a prompt. That asymmetry between the speed of creation and the speed of enforcement is the structural risk for brands, agencies and verification vendors alike.

The bottom line for media buyers: Safari has closed another identity door, and the open web now hosts thousands of fabricated-content sites wired directly into programmatic supply. Verification budgets and consent-based identity strategies, not workarounds, are the defenses Edwards says the industry must fund.