[zb3]

__This__ is where all those trusted app parts should go - a smart card with e-ink display that can provide high security assurance level and where I won't mind that it's locked down because it has only one purpose.

__Not__ to my smartphone, effectively preventing me from modifying the system in the name of security. A banking app can use a card like this and on the display I could for example see where a transaction would go and then I could accept it, possibly even with a biometric identification.

This would enable me to keep my smartphone customizable and banking apps secure at the same time.

[apologies for the rant]

[NetMageSCW]

And it would communicate using?

[zb3]

NFC, with the smartphone, but the smartphone would not need to be trusted, it would just relay encrypted + signed data.