GrapheneOS (@[email protected])
grapheneos.social
See https://grapheneos.org/articles/attestation-compatibility-guide for more information. Apps implementing this need to add new verified boot key fingerprints when GrapheneOS adds support for more devices since per-device keys are important for security. For our own devices, we could simply have our own attestation root of trust.

Swissquote has launched official support for GrapheneOS for their main app instead of it only being available for Yuh:

https://play.google.com/store/apps/details?id=com.swissquote.android

What’s new

  • We now officially support GrapheneOS!
  • Bug fixes and minor improvements

They’re verifying GrapheneOS via hardware attestation.

The code added for verifying GrapheneOS would be easy to extend on the server side with support for other alternate operating systems. They could also support future non-Google roots of trust to permit hardware not certified by Google. It still restricts what can be used but is at least extensible.

More apps using the Play Integrity API should implement this. It can initially be integrated to allow either the Play Integrity API or hardware attestation. Hardware attestation can be used to fully replace the Play Integrity API at the expense of legacy device support but that’s not mandatory.

See https://grapheneos.org/articles/attestation-compatibility-guide for more information. Apps implementing this need to add new verified boot key fingerprints when GrapheneOS adds support for more devices since per-device keys are important for security. For our own devices, we could simply have our own attestation root of trust.

  • hitmyspot@aussie.zoneEnglish
    1·
    8 days ago

    All banks I’ve looked at depend on Google pay. I’m in Australia. I was hopeful for revolut but they use Google for app certification.

    My understanding with nfc payments is the bank needs to implement themselves rather than use Google pay, which most don’t, even if it’s technically available.

    I haven’t seen curve pay. I’ll look into it. I have an android watch. I assume it would work fine with graphene os. I wonder if the Google pay implementation on it would work without Google pay on my phone?

    Edit: It looks like curve is not available in Australia but it supports revolut which is available in Australia so there may be a workaround.

    • Metr0pl3X@lemmy.mlMEnglish
      2·
      8 days ago

      Correct, my message was to confirm that payments can and do work on GrapheneOS so long as there is an implementation available to you.

      Now that you’ve mentioned the watch if it is a WearOS device capable of Google Pay then yes it can be used for payments independent of having Google Pay on the handset.