zlacker

In what way does this increase the security of my bank account? A criminal can use credentials it obtained via a hack, etc. using an approved platform to access my account. My own approved platform can be compromised by malware and used to access my account. This class of problems is addressed by physical ID tokens, not attestation.

>>yborg+(OP)
Corporate world currently sells attestation as a way to create secure token out of everyone's phone to the public sector worldwide. They obviously want it for the walled gardens and to fight ad-blocking, but public sector really wants to "deal with the cyber criminality" and they are clueless.

>>yborg+(OP)
Presumably a criminal now no longer can install a piece of malware that looks into the memory of your browser to steal credentials in the first place.

They will now have to use old fashioned social engineering to make you cough up that credential to steal.