how about on-device biometrics?
most of traffic is from mobile devices anyways. they have biometrics (e.g. Apple FaceID, fingerprint). they also have DeviceCheck (Apple Hardware + Apple servers) integrity checks of device/binary that is making requests. it is also free and private.
why using this technology is not part of conversation? seems like utmost strongest guarantees and perfect fit?
replies(3):