Question regarding Android App Attestation
Hi, this is a question and not an issue.
On your page on app integrity, you state that on Android, you use Play Integrity to enable integrity checks. You also state "that Google Play services are required to be installed on respective Android devices. The service cannot be used without Google Play services".
- Is this dependency on Google Play services a hard requirement for the German National EUDI Wallet?
- Do you plan alternative mechanisms for, e.g., GraphineOS?
- Why is full app integrity needed, and why is key attestation (provided by Android's KeyStore) not enough?
Thanks!