2 ms·
That really doesn’t follow. The web is already open, and banks are already regulated. Just mandate that banks provide access to their services via the web.
by zepto 6y ago
That really doesn’t follow. The web is already open, and banks are already regulated. Just mandate that banks provide access to their services via the web.
- Mediterraneo10 6y agoWeb browsers lack an equivalent to Google's Safety Net, which banks are increasingly insisting on for security's sake.
- zepto 6y agoThat’s easily solved.
- Mediterraneo10 6y agoHow so? Safety Net is about things like locking the bootloader on one's phone, and preventing the user from having root access. Desktop computers don't have the same restrictions, and most of the people on this thread supporting the PinePhone would chafe at the notion that their desktop computers need to be locked down.
- zepto 6y agoIt’s not about requiring that exact solution. It’s about providing security. There are other ways. If banks require a controlled endpoint, they can supply a hardware key.
- Mediterraneo10 6y agoAs mentioned elsewhere here, separate hardware keys are on the way out. Banks no longer wish to offer them because the vast, vast majority of customers have a phone that, if it passes Safety Net, already is a hardware key.
- zepto 6y agoThis means there is no reason they can’t support the web if required to do so. The argument that App stores must be regarded as public utilities because banks don’t support the web makes no sense. Banks can easily support the web.
- Freak_NL 6y agoThey often do; it's two-factor authentication that's the problem. If they'd support some open standard like WebAuthn this problem wouldn't exist, but they all insist on using home-grown solutions.