BankID is it’s own trusted platform. It is not connected to any of them. I am not sure if I understand what the other person is trying to say. Maybe they are afraid that Google and Apple can use BankID verified sessions to better identify the user?
I don’t think BankID has any sort of SDK that lets other apps access user data like that? All interaction with BankID I know of at least is triggered with the app needing authentication/signature opening a BankID session to the central service where you enter your authentication and then the BankID app is used as MFA to verify this.
Or am I misunderstanding what you are saying completely?
What I meant was that the phone operating system has SDKs (e.g. google services on android) which the app uses to make sure it hasn’t been tampered with, which makes it even harder to make an open source client.
It’s the opposite of supplying an SDK for third party developers.
they run verification through google/apple services. so we scandinacians can’t use a degoogled/microg android phones at all. at one point (long long ago) they used to run their own which made it available on any platform, but that service mysteriously died the day ubuntu phone launched. very coincidental.
I am not sure if this is true, maybe I am misunderstanding something. I use GrapheneOS and can use all banking services in Norway just fine. GrapheneOS does have a translation layer or something like that for Google Play Services, is that what you are thinking of?
Can you elaborate a bit on the google and apple servers for authentication? My impression was that this system uses its own platform.
BankID is it’s own trusted platform. It is not connected to any of them. I am not sure if I understand what the other person is trying to say. Maybe they are afraid that Google and Apple can use BankID verified sessions to better identify the user?
They are using the phone SDKs to verify that BankID was correctly installed, much like any other client side DRM.
I don’t think BankID has any sort of SDK that lets other apps access user data like that? All interaction with BankID I know of at least is triggered with the app needing authentication/signature opening a BankID session to the central service where you enter your authentication and then the BankID app is used as MFA to verify this.
Or am I misunderstanding what you are saying completely?
What I meant was that the phone operating system has SDKs (e.g. google services on android) which the app uses to make sure it hasn’t been tampered with, which makes it even harder to make an open source client.
It’s the opposite of supplying an SDK for third party developers.
Or even run the app as is on a “non-compliant” os - like a rooted android.
they run verification through google/apple services. so we scandinacians can’t use a degoogled/microg android phones at all. at one point (long long ago) they used to run their own which made it available on any platform, but that service mysteriously died the day ubuntu phone launched. very coincidental.
I am not sure if this is true, maybe I am misunderstanding something. I use GrapheneOS and can use all banking services in Norway just fine. GrapheneOS does have a translation layer or something like that for Google Play Services, is that what you are thinking of?