Hacker News new | ask | show | jobs
by Groxx 5180 days ago
>* Exactly what's keeping the cookie on the browser and the phone from being copied?*

SSL. Either you trust it or you don't. Similarly, either you trust the CAs to work (preventing a real MITM on https traffic) or you don't. Which makes this as secure as your banking site, except for the initial pairing, which I dare say they do more safely than any bank I've seen.