3 ms·
It doesn't matter how many different things have support for passkeys. Because they let websites do "attestation" of them, it won't be long until every major we
by josephcsible 3y ago
It doesn't matter how many different things have support for passkeys. Because they let websites do "attestation" of them, it won't be long until every major website is only allowing logins with passkeys blessed by Microsoft, Apple, or Google.
- 5e92cb50239222b 3y agoAFAIK Apple refused to implement attestation, so you can't realistically enforce it. Who knows how long that one is going to last, though.
- supriyo-biswas 3y agoIt’s incorrect - Apple has in fact implemented attestation as can be seen in https://github.com/lbuchs/WebAuthn https://github.com/lbuchs/WebAuthn.
- FullyFunctional 3y agoI'm not familiar with all this, but when I run the demo page (https://webauthn.lubu.ch/_test/client.html https://webauthn.lubu.ch/_test/client.html) on macOS 13.4.1 with Safari (Firefox doesn't work) I get "none" for the apple attestation.