Dutch 'idealist' bank ASN blocks non-Google Android, including GrapheneOS
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Key attestation certificates, as the Android spec describes them, carry the challenge, security level, a RootOfTrust extension (verifiedBootState, verifiedBootKey hash, deviceLocked) and attestationApplicationId, all signed by the chip and chaining to Google's roots.