X-apple-i-md-m [SIMPLE]
Its primary role is to carry a cryptographic payload (a blob) that proves the device is a genuine Apple product (iPhone, iPad, Mac) and that it has not been compromised (e.g., jailbroken or attempting to spoof its identity).
If a hacker in another country steals your password, they might try to log in from their own computer. But because their computer cannot generate the correct X-Apple-I-MD-M x-apple-i-md-m
: It is almost always sent alongside x-apple-i-md (which functions as a short-lived one-time password). Its primary role is to carry a cryptographic