5 ms·
The API could return different identifiers per app
by skdk 3y ago
The API could return different identifiers per app
- eli 3y agoWhile it's also signing things for you? That seems rather hard to implement.
- wiml 3y agoIt's what FIDO/U2F does, right?
- slashdev 3y agoThat’s meaningless if you can also use it to compute a signature. Just use the signature of a constant string as the id.
- londons_explore 3y agoAndroid could append the unique app identifier (ie. "com.myapp") to the end of any data to be signed. Then the user can't be tracked between apps. But it also prevents you using 'sim sign in' to sign in to the same service from a web browser and app for example.
- aleph_minus_one 3y ago> Android could append the unique app identifier (ie. "com.myapp") to the end of any data to be signed. Then the user can't be tracked between apps. But it also prevents you using 'sim sign in' to sign in to the same service from a web browser and app for example. I doubt that: simply add two "SIM identities" (which on the mobile phone map to the same SIM card) to the account of the respective service.