Well, it looks like #MobilePay reverted to check Play Integrity again.
-
Well, it looks like #MobilePay reverted to check Play Integrity again. #Europe does not have a chance at Digital Sovereignty if all Android phones must be #Google #Certified and businesses keep the only option of #Play #Integrity.
#Unified #Attestation is the alternative for non Google devices (#Jolla, #Volla, #deGoogled Android) but unless this is mandated by @EUCommission, this means all banking and financial services will be monitored, gated and blocked if needed on a whim.
@denzilferreira @EUCommission It's probably worth updating the evaluation here https://sapio.ovh/app/fi.danskebank.mobilepay and make some noise on social media.
-
@denzilferreira @EUCommission It's probably worth updating the evaluation here https://sapio.ovh/app/fi.danskebank.mobilepay and make some noise on social media.
-
Well, it looks like #MobilePay reverted to check Play Integrity again. #Europe does not have a chance at Digital Sovereignty if all Android phones must be #Google #Certified and businesses keep the only option of #Play #Integrity.
#Unified #Attestation is the alternative for non Google devices (#Jolla, #Volla, #deGoogled Android) but unless this is mandated by @EUCommission, this means all banking and financial services will be monitored, gated and blocked if needed on a whim.
@EUCommission MobilePay responded that due to security reasons, they use Play Integrity. This cannot be the only option. This kills any dream of a Google free device that you can use for any banking activities. Do we really want Google to control every single transaction occuring in Europe?
-
@EUCommission MobilePay responded that due to security reasons, they use Play Integrity. This cannot be the only option. This kills any dream of a Google free device that you can use for any banking activities. Do we really want Google to control every single transaction occuring in Europe?
@EUCommission it would help to get an official stance on this matter.
Meanwhile, I'll meet with MobilePay and hopefully Volla & Jolla to have a deGoogled NFC payment option in European made devices without Google Services.
"Thank you for your messages and input. I have forwarded the issue to the appropriate team with you contact details. They will be in contact with you."
-
@EUCommission it would help to get an official stance on this matter.
Meanwhile, I'll meet with MobilePay and hopefully Volla & Jolla to have a deGoogled NFC payment option in European made devices without Google Services.
"Thank you for your messages and input. I have forwarded the issue to the appropriate team with you contact details. They will be in contact with you."
@denzilferreira Maybe to take on board the discussion about the digital euro that is gaining traction. It should be assured it operates 100% on EU technology.
#digitaleuro -
@denzilferreira Maybe to take on board the discussion about the digital euro that is gaining traction. It should be assured it operates 100% on EU technology.
#digitaleuro@artelse @denzilferreira same for the digital id eu apps #EUDIWallets
In the Netherlands it will run only run with Google Play Integrity. Same response from the developers that it's for security reasons and Android Hardware Attestation API or Unified Attestation are not even considered as viable options.
-
@artelse @denzilferreira same for the digital id eu apps #EUDIWallets
In the Netherlands it will run only run with Google Play Integrity. Same response from the developers that it's for security reasons and Android Hardware Attestation API or Unified Attestation are not even considered as viable options.
-
@denzilferreira @artelse @volla @jolla what about an open letter to devs to reframe the google security story and show alternatives. It might switch a few minds. Not the ones that choose the
. -
@denzilferreira @artelse @volla @jolla what about an open letter to devs to reframe the google security story and show alternatives. It might switch a few minds. Not the ones that choose the
.@nomad99 @artelse @volla @jolla open letter has been published by Volla a while back and they have been pushing awareness, for example https://volla.online/de/resources/Documents/VCD26-UnifiedAttestation.pdf
This needs to be an EU regulatory requirement, to force app developers to consider devices without Google Services. The requirement needs to come to developers, not from developers.
I am aware that GrapheneOS also does not like the idea of unified attestation and prefers to use what is already on Android APIs. And that is also another option that can coexist. Right now, it is Play Integrity or nothing. That is what needs to change.
-
@nomad99 @artelse @volla @jolla open letter has been published by Volla a while back and they have been pushing awareness, for example https://volla.online/de/resources/Documents/VCD26-UnifiedAttestation.pdf
This needs to be an EU regulatory requirement, to force app developers to consider devices without Google Services. The requirement needs to come to developers, not from developers.
I am aware that GrapheneOS also does not like the idea of unified attestation and prefers to use what is already on Android APIs. And that is also another option that can coexist. Right now, it is Play Integrity or nothing. That is what needs to change.
@denzilferreira @artelse @volla @jolla EUDI Wallet Implemantation goals. (Regulation 2024/1183) https://eur-lex.europa.eu/eli/reg/2024/1183/oj/eng
Google Play Services (and similar dependencies) undermine at least 4 out of 5 EUDI Wallet goals as defined in this Regulation
Goal 1 Digital sovereignty - reduce dependency big tech and promote eu conrolled infrastructure.
Goal 2 Open interoperable standards and fair access to hardware/software features
Goal 3 User control and inclusivity for ALL eu citizens to use EUDI wallets regardless of device or OS
Goal 4 Security and Design use state of the art encryption and tamper proof solutions.
Goal 5 No vendor lock in and prevention on contractual, economical or technical barriers to switch between wallets.
-
@denzilferreira @artelse @volla @jolla EUDI Wallet Implemantation goals. (Regulation 2024/1183) https://eur-lex.europa.eu/eli/reg/2024/1183/oj/eng
Google Play Services (and similar dependencies) undermine at least 4 out of 5 EUDI Wallet goals as defined in this Regulation
Goal 1 Digital sovereignty - reduce dependency big tech and promote eu conrolled infrastructure.
Goal 2 Open interoperable standards and fair access to hardware/software features
Goal 3 User control and inclusivity for ALL eu citizens to use EUDI wallets regardless of device or OS
Goal 4 Security and Design use state of the art encryption and tamper proof solutions.
Goal 5 No vendor lock in and prevention on contractual, economical or technical barriers to switch between wallets.
@nomad99 @artelse @volla @jolla thank you for the link. These are two separate discussions. One is about the ability to use devices without Google. Digital Wallet, and Digital IDs piggyback on the trust of the devices they are running on. If we can't verify the device is secure and untampered with, you cannot protect someone's funds (digital wallet) or their identity (digital ID).
This is why it is of upmost importance that Play Integrity alternatives exist. Because otherwise, you will not have any choice other than use Google Certified devices.
-
@nomad99 @artelse @volla @jolla thank you for the link. These are two separate discussions. One is about the ability to use devices without Google. Digital Wallet, and Digital IDs piggyback on the trust of the devices they are running on. If we can't verify the device is secure and untampered with, you cannot protect someone's funds (digital wallet) or their identity (digital ID).
This is why it is of upmost importance that Play Integrity alternatives exist. Because otherwise, you will not have any choice other than use Google Certified devices.
@denzilferreira @artelse @volla @jolla yes, two different discussions you are right. On the foundation we are dealing with big tech lobby pushing in different directions and in different markets at the same time.
Google is pushing for making play integrity a standard, banking apps are going to follow the DNA of the wallet apps. Last week I was offered to use my bank app to verify my identity. My best guess is that Banking apps will be connected to EUDI wallets and vice versa. Hence the same responses from developers because down the road they have to be compliant. -
@denzilferreira @artelse @volla @jolla yes, two different discussions you are right. On the foundation we are dealing with big tech lobby pushing in different directions and in different markets at the same time.
Google is pushing for making play integrity a standard, banking apps are going to follow the DNA of the wallet apps. Last week I was offered to use my bank app to verify my identity. My best guess is that Banking apps will be connected to EUDI wallets and vice versa. Hence the same responses from developers because down the road they have to be compliant.@nomad99 @artelse @volla @jolla in Finland, we do have an API that apps can use to validate one's identity via bank credentials. But if banks move to force Play Integrity, we can't approve the bank login to validate one's identity. Which makes it impossible to login on public services, tax office, health care, etc. We are slowly becoming dependent on a Google Certified device to identify who we are. And that is the problem.
#Volla, #Jolla, #Murena #HMD Secure devices would be penalized because we take EU Digital Sovereignty seriously and offer deGoogled devices. #Murena e/OS is also on the same boat if Play Integrity is the only way that developers use to check device integrity.
-
S strit@mastodon.social shared this topic
