A research team suggested a new secure-by-design API after discovering design flaws in the way Android apps are verified by password managers.
Source: Threadpost