Hacker News Reader

The identity provider is on-device and has to run on phones which don't do hardware attestation.

That’s only for selfies. If they use and id I’m pretty sure it is getting sent to a k-id server.