[bendtheblock]

not cryptographically no (and would be nice to see, but crypto is not the answer). But as a consumer when I shop online I never worry - if I am defrauded the (centralised) bank will give me the money back, that's the solution and it works for everyone

[DennisP]

And that's how I ended up having to change my card numbers on file with a bunch of businesses, and why every couple months a purchase fails until I respond to a fraud email. It's a hassle and it's unnecessary, especially when phones have secure enclaves for private key storage. I'm not even arguing for blockchains now, just for using public keys in online purchases.

[dataflow]

> especially when phones have secure enclaves for private key storage

Can you convince the powers that be to allow rooted phones to store card credentials?

[DennisP]

It's already used for Apple Pay so...yes? And:

> Crucially, iOS itself cannot directly access data stored in the secure enclave, so even if malware could make its way onto an iPhone, it would have no access to the data.

https://9to5mac.com/2020/02/12/apples-secure-enclave/

Even if it's not a perfect solution, it's better than handing full account credentials to every online merchant I use. A dedicated FIDO fob would be even better but the phone is something most people already have.

[dataflow]

Google Pay refuses to work on rooted devices unfortunately.