Much to the dismay of pirates everywhere, It appears that Nintendo is finally rolling out the infrastructure changes to their Content Delivery Network to put an end to apps like freeShop, Villain3DS, TikDevil, and FunKeyCIA, among others.
For those of you that missed out, in the recent 11.8.0-41 update for the Nintendo 3DS, several changes to how the NIM service handles downloading Nintendo 3DS software from the eShop were made. The main change involves sending an encrypted copy of the user's game ticket to their server for authentication. If the server finds the ticket is invalid, or no ticket is provided, the server could deny you access to the content files you are trying to retrieve.
Looks like 11.8.0 backports the Switch's aauth ideas to 3ds -- network comms now send an encrypted(?) copy of app ticket to the server.— Michael (@SciresM) July 31, 2018
They may not act on it immediately, but like on Switch this lets N perfectly detect pirate accesses vs normal ones, and ban however they like.
This level of granular per-title validation will effectively put an end to any software that relies on the open availability of content files on the Nintendo CDN to function, including freeShop, CIAngel, TikDevil, and even PC based clients such as Villain3DS, PlaiCDN, and FunKeyCIA to name a few.
However, up until earlier today, the server wasn't denying anyone downloads at all. However, multiple reputable sources have stated that the changes have begun to roll out and that it is unlikely that any workarounds will be found.
Because this followup round of changes is server side, this effects all firmware and all devices trying to download from the Nintendo CDN. Staying on 11.7 or below will not make freeShop continue to work, and before you ask, yes, software you already pirated is safe. (for now, anyway.)
Nintendo has finally put in place the server-side change to finish what 11.8.0 started. FreeShop and other 3DS piracy apps are now dead (probably forever).— Devon Maloney (@plailect) August 9, 2018
As of approximately 1 AM EST, August 22, 2018, the Nintendo CDN has applied this ticket validation method to over 2800 titles on their network.
Source and Ongoing Discussion
Related 3DBrew Page
A: Not really. The bulk of the changes made are server side, meaning that they apply to all firmware, all platforms, everything trying to download 3DS content from the Nintendo CDN. I don't recommend updating on principle but that choice is yours to make.
Q: Do I have to delete the games I downloaded from freeShop to avoid being banned?
A: No. This ticket check is done only when downloading titles through the NIM Service on the 3DS. Not when launching games. Not when going online in games. Not when downloading or installing games through other means.
Q: What uses the NIM service to download from the Nintendo CDN?
A: The Official 3DS eShop, Official 3DS eShop Sleep Mode Downloads, and freeShop Sleep Mode Downloads. That last one is the only wild card here. We don't know what Nintendo might do if you upload an invalid game ticket to them through NIM. They could possibly use this ban you, but as of now, it doesn't seem like they are.
Q: Will there be a workaround for this in the future?
A: Almost certainly not. Don't count on it.
Q: Can you still download non-first-party 3DS games?
A: No, as of August 22, 2018, nearly all titles are requiring valid tickets to download. A complete list of titles that are blocked is available courtesy of @DMSalesman, here.
Q: Does any of this apply to Wii U content on the Nintendo CDN?
A: No. Nintendo hasn't updated the Wii U with any of this security, which they would have to do to implement this.