A ‘trusted device’ cookie is not the same as continuous authentication of the person

Cyber Desk · Insight. Series: Digital disputes, as Indian courts actually see them.

A ‘trusted device’ cookie is not the same as continuous authentication of the person.

When fraud hits a net-banking account, the bank points to a “trusted device” flag — as if a browser cookie proves who transacted. It does not. A cookie binds a browser instance; it does not bind the human holding it. The real file is session logs, IP trail, device fingerprint, timing. Each is a fact to weigh. None is a verdict by itself.

Trusted device.

Not trusted person.