NFC payments on GrapheneOS
NFC payments on GrapheneOS
Hi, I want to pay with online prepaid visa in person. I could add it to Google Pay, but Google Pay doesn't support NFC payments on GrapheneOS. Do you know any other app that lrts you do that?
Carry your card or some cash. Google Pay will never certify GOS.
Unfortunately no. The best option, unfortunately, its to have a second device, sadly.
My second device is a bank card. Easy.
AFAIK there are alternatives no that work.
I've heard some banking apps having their own NFC payments, but I know PayPal and google pay don't work from my own experience.
it's a very closed system with Google , banks and OEMs working together. I doubt it'll work properly on anything outside stock OEM ROMs.
I use Curve Pay to do that, but it might only be available in some countries.
Also the NFC payment feature isn't in the version that's on Google Play.
I believe there's another app called iCard which supports it but I've never used that.
I use iCard. It works fine. You do need to open an iCard account though. I've had mine for years without any issues.
Why hasn't someone made a FOSS NFC payments app yet? Any bored Android FOSS developers, please make this your next project.
If it was as simple as writing an app it would be done by now. The problem is authorisation, the bank isn’t going to action the transfer request just because Bob’s Banking app says so. The request either needs to come from their own app or from one of their partners (Apple).
Those aren't just payment apps, they're a payment service. Google, Apple and Samsung are "trusted" providers to process payments.
Some FOSS developer could theoretically make an app to process Google Pay but they'd need Google's authentication, which is never going to happen, for a variety of reasons.
Probably the issue lies somewhere else, like legal, infrastructure or sm.
It's more down to trust and attestation than a technical implementation. Whoever makes an NFC payment system needs to prove to payment processors that the chain of software and hardware from the payment terminal to whatever proves you're the account holder (a card or a phone) can be identified. And, separately, the implementation needs to be audited.
This may sound like they're trying to make this horrible walled garden on the surface, but bank users expect their money to not get stolen. And if it is, they expect the bank to make that problem disappear. The bank can only provide these assurances if they control everything.
This is why they use hardware attestation and a chain of trust all the way through to the OS to identify the specific implementation of an NFC payment system. They want to know they can go after whoever created the buggy NFC payment implementation to recover the money or to least stop partnering with them.
Not a lot of FOSS developers would go through the trouble.