alt Hacker NewsIf Windows wasn't so far behind Apple and the rest of the industry in regards to integrity APIs this wouldn't be necessary. It's embarrassing for Microsoft that someone needs to use a separate, more secure device since their security is so bad.
Replies
Windows Hello offers an attestation API according to the releases I found, though because Microsoft has called at least four products "hello" now, I can't easily find the details. I don't think there's a technical reason why Google couldn't have released an app with a URL handler that uses that API except maybe for the Windows TPMs being less secure than mobile ones in general.
Integrity doesn't guarantee any security to your device, just that the device is same as from the factory. That's a common misconception.
It's embarrassing for Hacker News that people here are commenting to support attestation systems that prevent you from owning the device you bought.