iOS 27 Blocks The Trade Desk's Core Ad Serving Domain From Safari
The Development
Apple's iOS 27, released September 14, has effectively blocked The Trade Desk from serving ads on Safari for updated devices. While iOS 27 added several identity vendors — Unified ID 2.0 (UIDAPI.com), ID5, Audigent, LiveRamp, and Permutive — to its tracker blocklist, the critical issue for The Trade Desk is different: Apple's WebKit also blocked adsrvr.org, The Trade Desk's core ad request and delivery domain, not merely its identity infrastructure. The Trade Desk's senior director of engineering flagged the issue directly to Apple's WebKit team via GitHub on September 29. As of September 30, Apple's WebKit privacy lead John Wilander has acknowledged the ticket but offered no resolution timeline, saying only he will notify The Trade Desk if and when changes are available to test. Google's ad.doubleclick.net domain, by contrast, was unaffected.
Our Take
The operational and strategic implications here are distinct and both serious. Operationally, any campaign using The Trade Desk to reach Safari audiences on iOS 27 devices is partially dark right now, with no confirmed fix date. Strategically, this confirms what Apple's moves against Meta and Criteo already signalled: WebKit's blocklist is a structural lever that can be applied to any vendor, at any layer of the ad stack, at Apple's discretion. The fact that Google's domain sailed through while The Trade Desk's was blocked is not a detail to ignore. Whether intentional or accidental, the asymmetric outcome reinforces Google's positional advantage in a world where Apple controls the browser gate.
What Changed
Apple now has the demonstrated ability to eliminate a DSP's access to an entire browser environment — not by restricting identity resolution, but by blocking ad delivery infrastructure itself. The line between privacy enforcement and inventory gatekeeping has collapsed.
Marketing Impact
Programmatic media teams running Safari-targeted campaigns via The Trade Desk should audit delivery reporting immediately for iOS 27 device segments. Reach and frequency guarantees built on Safari inventory are unreliable until adsrvr.org is removed from the blocklist.
Competitive Implication
DSPs dependent on open-web Safari delivery face unilateral exposure to Apple infrastructure decisions with no appeal mechanism and unpredictable timelines. Walled-garden platforms operating inside Apple's approved ecosystem — including Google's owned-and-operated inventory — absorb share by default when open-web pipes are severed.
Strategic Outlook
If Apple resolves this as an inadvertent block, the incident still validates that adsrvr.org was vulnerable — and signals that other DSP delivery domains are too. If WebKit reaffirms the block, The Trade Desk loses Safari programmatically, accelerating the already-visible shift of open-web budgets toward CTV and in-app environments where Apple's browser policies do not apply.
The Exploit
Action Item
Media investment leads running Q4 brand campaigns should immediately pull iOS 27 Safari delivery data from The Trade Desk and reallocate that inventory budget to CTV or in-app channels now, before upfront commitments lock the plan in place.