3 ms·
So far it doesn’t seem to be the case. FIDO has done a great job of pushing the standard adoption, and finally even Safari/Apple seems to be supporting it. On
by ecesena 8y ago
So far it doesn’t seem to be the case. FIDO has done a great job of pushing the standard adoption, and finally even Safari/Apple seems to be supporting it.
On the device side, there are also open source solutions (disclaimer: I work on SoloKeys).
Other than Vanguard, Amazon AWS also temporarily launched support for fido2/u2f only with yubikeys, but soon after they relaxed the requirements. It might be just a marketing/co-sponsorship move.
This is not to say that the risk isn’t there, but support for anonymous attestation is certainly a great feature, and it’s already available (though, not sure if implemented).