3 ms·
No you do not need to use anything proprietary to use WebAuthn. There are open source software[0] and hardware keys[1]. [0]: https://github.com/psanford/tpm-fi
by psanford 4y ago
No you do not need to use anything proprietary to use WebAuthn. There are open source software[0] and hardware keys[1].
[0]: https://github.com/psanford/tpm-fido https://github.com/psanford/tpm-fido
[1]: https://solokeys.com/ https://solokeys.com/
- codedokode 4y agoWebAuthn supports attestation of key storage and site owners might choose not to trust keys coming from an unknown DIY device.
- psanford 4y agoFortunately that feature isn't used outside of enterprise environments. Apple's passkeys don't support it so there will not be any mainstream adoption for requiring an attestation cert.