I doubt the security is greater:
* Phones have a far larger attack surface and are regularly exploited.
* Confidentiality is part of security, and I don't want my purchases tied to the rest of my phone data and identity.
I doubt the security is greater:
* Phones have a far larger attack surface and are regularly exploited.
* Confidentiality is part of security, and I don't want my purchases tied to the rest of my phone data and identity.
Motorolla has the horribly overpriced AME 2000 (ick), and Samsung has the knox platform built standard into most of their stuff (which is very good), but they lack a true HSM. If you're an android user and want a HSM for sensitive data, get one of the Microcrypt SD devices. It is as good as you'll get (and still not as good as an iPhone).
Unique card # per transaction is the holy grail of security.
Your claims of somehow compromising confidentiality are also provably false.
There is a reliance on the security of the local device that isn't an issue with cards. Primarily this is more of a social engineering concern anyway, rendering most technical solutions useless.
What's the point of saying something is provably false and then completely leaving out any reference to that proof?
Agree. However, this does illustrate a point that safety concerns are valid.
Myself, I'm a proponent of mobile payment but I understand the inherited hesitation from some folk about security.