> The web server can also choose to lookup further information on attested authenticators in the FIDO Alliance Metadata Service (specification). This service pr

> The web server can also choose to lookup further information on attested authenticators in the FIDO Alliance Metadata Service (specification). This service provides up-to-date information on registered authenticators. This smells like Certificate Authorities. Is the purpose just to protect users against insecure hardware that is past its due date?