zlacker

>>danShu+(OP)
Expected, but meaningless if we can't drive people towards Firefox and away from Chromium products. That's something of a responsibility we all have, especially those of us invested in the safety and security (collectively, trust) of the web.

I haven't seen anything yet on whether Brave will support it, though if I'm understanding correctly, they won't have a choice since they're using Chromium. Hopefully I'm misinformed.

>>eganis+s8
The end result is that DRM and banking sites will just tell you to use chrome to continue. And users will keep migrating to chrome until Mozilla is forced to implement it.

>>Gigach+b9
I dunno about banking sites, currently they seem to be some of the worst out there in terms of caring about modern security techniques. eg SMS 2FA at best, terrible password handling etc. They don't move very fast at all.

It feels weird that I'm now grateful for how crap they are.

>>antod+5c
> SMS 2FA at best

Because their customers aren't security nerds that have smartphones with authentication apps.

They want people that barely get smartphones, or still use feature phones, to be able to access their services with some improved security workflows.

>>pjmlp+eq
The apps of the banks often generates an OTP or intercept a push notification, ask for fingerprint and send an authorization response back to the server. I go through that with each of my banks every time I login or make some money transfer.

I got codes via SMS when I installed those apps and I had to prove that I owned the phone number I was associating with the app.

>>pmontr+dO
Good example of what many non-techie people will never understand, or even have phones capable of doing it.