The declarative device management video demonstrates how today's profile management can be achieved through configuration type declaration. I'm interested and curious to know about the plans for mechanisms to manage applications through declarations. I'm wondering if there could be a new type of declaration for managed applications or would it be accommodated with the existing type of declarations (say, assets or configuration)?

As part of declarative management, a status report would be sent by the device whenever there is a state change. If for some reason, the server missed saving this status report, is there a way to get the entire status (snapshot) of the device? So that the server has a way to recover through an on-demand request or any other similar mechanism. During intermittent network issues, if the device could not connect to the server to send the status report, would there be a retry mechanism to attempt to send the status whenever the connection with the server is successful?

Currently, it seems like the declarations present in the declaration manifest are downloaded one by one and then processed (installed & activated). After this, a single status report that contains the status of all declarations that were processed would be sent to the server. Does the processing of the downloaded declaration happen immediately after they all are downloaded or is it attempted periodically? or both? Is it possible to receive multiple status reports that might contain the status of a subset of declarations downloaded? Is there a way or plan to support the download of multiple declarations in a single request? Is there a way or plan to send a download URL to the device for downloading a declaration? These answers would help us in designing our MDM server better.

How to become a developer of MDM (such as jamf), what development level development account is required, the qualification requirements for enterprises, and the combination of MDM and ABM to get through the interface. Thank you very much for whether there are relevant documents.

I'm not sure what is special about Gmail, but my declarativeNetRequest rules are totally ignored. I make an web extension that blocks email trackers (1x1 pixel images embedded in emails to track if and when you open email sent to you). All images in Gmail are loaded through Google's proxy: googleusercontent.com/proxy/#originalURL But no matter what I do, I can't block a single image that is loaded in an email. To try and prove it is a bug in Safari, I created a new template web extension in Xcode. I block all resourceTypes (images and other should be all that is needed) and added two rules: Block all images loaded through Google's proxy server (this should block all embedded images in all emails) Block any image with copper in the URL (just in case the blocking doesn't apply to the proxy root url for some reason).  {   "id": 1,   "priority": 1,   "action": { "type": "block" },   "isUrlFilterCaseSensitive": false,   "condition": {    "regexFilter": "googleusercontent.com/proxy",    "resourceTypes": [     "image",     "media",     "main_frame",     "sub_frame",     "stylesheet",     "script",     "font",     "xmlhttprequest",     "ping",     "websocket",     "other"    ]   }  },  {   "id": 2,   "priority": 1,   "action": { "type": "block" },   "isUrlFilterCaseSensitive": false,   "condition": {    "regexFilter": "copper",    "resourceTypes": [     "image",     "media",     "main_frame",     "sub_frame",     "stylesheet",     "script",     "font",     "xmlhttprequest",     "ping",     "websocket",     "other"    ]   }  } ] Even though I know this isn't needed, I also added the requester domain (mail.google.com) and the proxy domain (googleusercontent.com) to the permissions list in the manifest file: ... "declarative_net_request": {    "rule_resources": [{      "id": "ruleset_1",      "enabled": true,      "path": "rules.json"     }]   },  "permissions": [    "declarativeNetRequest",    "*://mail.google.com/*",   "*://*.googleusercontent.com/proxy/*" ] If I open an email from copper, the image still loads in Gmail If I right click and select "Open Image in New Tab", the image will not load and I am told it was blocked If I open a test page that has two images in it, one the image from the email, the image is blocked and the other image is not (as expected, the second image is from wikipedia and should not be blocked) Running the same extension in Chrome DOES block the image in Gmail (and in all the other cases too)