Apple unblocked The Trade Desk's Safari ads in a beta, and ad tech's answer still has zero releases

Two words ended three weeks in the dark

At 9:40 pm Pacific on October 9, Apple's▼−1.28% — Apple, down 1.28 percent today WebKit privacy lead John Wilander closed the standoff with two words: "Confirmed resolved." ¹ The bug beneath them↗ had been filed on September 21 by Ian Meyers, a senior engineering director at The Trade Desk▼−1.94% — The Trade Desk, down 1.94 percent today, priority P1: Safari on iOS 27 was refusing outright to load nine ad tech domains, among them adsrvr.org, the company's core ad request and delivery domain ¹. Google's ad.doubleclick.net kept serving on the same pages ².

One domain fixed, a bigger list still live

The iOS 27.2 beta released on October 5 drops adsrvr.org, though the live rollout may take three or four weeks, and the block appears aimed at match.adsrvr.org, the cookie-sync endpoint sharing the domain ³. The mechanism stays. On October 2, two sources with direct knowledge↗ described the nine-name list as scrapped for a remote library of hundreds of ad tech, data and identity companies that Apple devices call on the fly, so a vendor can be blocked without a new iOS release ⁴. The list lives in a private repository, and whether Google is on it is unconfirmed ⁴.

Production ready, nothing published

That growing list is Anthony Katsur's opening. The IAB Tech Lab chief executive posted on October 8↗ that Trusted Server, the standards body's open-source edge runtime, "is production ready TODAY!" ⁵. The repository says otherwise↗: 343 commits, 130 branches, zero tags, no published releases, a FAQ_POC.md at the root, and documentation that warns it "may describe unreleased behavior" ⁶⁷. The Tech Lab's product lead expects the first "production-level tests" of campaigns on publisher servers by early next year ³, and Katsur himself called adoption "a slow mover" on September 30 ⁵.

Who pays and who collects

The rebuild runs on software with no version number, and every page and ad request routed through it lands as billable traffic on Fastly, Cloudflare▲+5.82% — Cloudflare, up 5.82 percent today or Akamai ⁶⁵. The Trade Desk came in already bleeding, down 24% after hours on August 6 and 575 jobs cut on September 4 ⁵, and now trades down 68.2% for the year on a 15.0% free-cash-flow yield over $0.8 billion of annual free cash flow, against 4.5% for the median S&P 500 company ⁸.

KeyBanc sized the block at a low-single-digit annual revenue headwind, and only if it persisted ⁹. The domains rlcdn.com, id5-sync.com and permutive.com are still blocked, though Permutive has already rotated to a new domain as a bridge, and agency buyers report win logs↗ showing iOS 27 ads that won auctions and never rendered ³.

The bulls have their fact

Apple fixed the domain quickly and quietly, while iOS 27's install base was small, and a fast resolution, KeyBanc wrote, is immaterial ⁹. What the fix leaves standing is the principle the episode proved. An 11-line WebKit change, merged on February 13, can switch any independent ad vendor off Safari on every iPhone ⁵.

Four dates decide it

Watch iOS 27.2's general release, three or four weeks out from the October 5 beta ³; The Trade Desk's third-quarter print; Trusted Server's first tag; and the first publisher named in production. Apple silenced nine domains with 11 lines of code; the open web's counter, so far, is 343 commits and no version number.