Pay securely with an Android smartphone, completely without Google services: This is the plan being developed by the newly founded industry consortium led by the German Volla Systeme GmbH. It is an open-source alternative to Google Play Integrity. This proprietary interface decides on Android smartphones with Google Play services whether banking, government, or wallet apps are allowed to run on a smartphone.

you are viewing a single comment's thread
view the rest of the comments

[–] HubertManne@piefed.social 1 point 6 months ago (1 child)

I often wonder why physical authentication devices can't just be a usb storage device with a physical read only switch. The user keeps it read only except when interacting to add an authetication with a provider. Of course ideal it would be in person and all services would have physical locations.

permalink

fedilink

source

parent

hideshow 1 child comment

[–] rumba@lemmy.zip 1 point 6 months ago

Read only doesn't cover what's needed. You need something that holds a keys that cannot be extracted. Ideally, the institution sends it a challenge, it signs the challenge and returns it. You need the keys not to be retrievable.

permalink

fedilink

source

parent