As usual with these things: What about app/server security. Simple token verification is prone to abuse (malware) and spoofing is becoming a bigger issue on mobile only platforms than ever before.
Server abuse is difficult, but not impossible and since getting a banking licence usually does not verify any security measures, I'm wondering what they already did (or didn't) do.
(I'm well aware of the state-of-the-art, and the usual less than so, security of banking apps).
Server abuse is difficult, but not impossible and since getting a banking licence usually does not verify any security measures, I'm wondering what they already did (or didn't) do.
(I'm well aware of the state-of-the-art, and the usual less than so, security of banking apps).