While not all users have Chrome installed, the vast majority do. For those who do not, we are using the browser fallback method described above (option 3); other than adding one line of code, we get the fallback for free from CCT. As noted before, the browser fallback is not the ideal user experience due to its latency, but it does maintain the high level of security that Plaid requires.
Maybe I misunderstood the article, but the way I read this sentence is 'this is one of the four options we considered, and it wasn't implemented because of the UX'
And they explicitly disclaimed responsibility for security breaches.
TO THE EXTENT PERMITTED BY LAW, PLAID, ITS AFFILIATES AND ITS AND THEIR SUPPLIERS WILL NOT BE RESPONSIBLE FOR: (A) ANY LOST PROFITS, LOSS OF USE, LOST OR INACCURATE DATA, FAILURE OF SECURITY MECHANISMS, FINANCIAL LOSSES, OR ANY INDIRECT, SPECIAL, INCIDENTAL, RELIANCE OR CONSEQUENTIAL DAMAGES OF ANY KIND OR (B) ANY DAMAGES OR AMOUNTS EXCEEDING, IN THE AGGREGATE, THE GREATER OF (1) THE AMOUNT YOU PAID US TO USE THE PLATFORM AND (2) ONE HUNDRED U.S. DOLLARS (US $100).
Comments
What happens if you don't have Chrome installed on your device?
Firefox and the Samsung Browser also support custom tabs. The default launching code will prefer your device's default browser.
Maybe I misunderstood the article, but the way I read this sentence is 'this is one of the four options we considered, and it wasn't implemented because of the UX'
When plaids infrastructure gets popped the fallout is going to be incredible. Hundreds of thousands of bank logins, ripe for the picking.
And they explicitly disclaimed responsibility for security breaches.
The fact that banks do not uniformly have SSO and scoped cookies (so intermediaries aren’t required to store passwords with full access) is awful.