4 ms·
Does FIDO have a method to require keys are stored on devices certified to a certain level? One thing that concerns me is that if passkeys gain acceptance, cer
by RobotToaster 3y ago
Does FIDO have a method to require keys are stored on devices certified to a certain level?
One thing that concerns me is that if passkeys gain acceptance, certification requirements could be used to block open source/self hosted implementations.
- gruez 3y ago> Does FIDO have a method to require keys are stored on devices certified to a certain level? yes: https://developers.yubico.com/U2F/Attestation_and_Metadata/ https://developers.yubico.com/U2F/Attestation_and_Metadata/
- allset_ 3y agoThis is for U2F, which is not FIDO2, though FIDO2 is backward compatible with U2F with a limited set of features. U2F-only hardware is not compatible with the passkeys model. See https://fidoalliance.org/specs/fido-v2.0-ps-20150904/fido-key-attestation-v2.0-ps-20150904.html https://fidoalliance.org/specs/fido-v2.0-ps-20150904/fido-ke... for the FIDO2 attestation specs.