3 ms·
> It is a standard that anyone can implement WebAuthn supports attestation of a key storage device. How are you going to persuade site owners to trust your sel
by codedokode 4y ago
> It is a standard that anyone can implement
WebAuthn supports attestation of a key storage device. How are you going to persuade site owners to trust your self-signed attestation certificate?
- mynameisvlad 4y agoAsk the folks over at SoloKeys, who are both open source and FIDO certified. It also supports it. Whether it’s enforced is a site owner’s decision, as are the trusted roots they use. If a site owner wants to limit to only a single type of authenticator, they can already do that by only trusting its key, so I don’t see how that’s relevant to the topic of implementing the standard.