6 ms·
Safari's support for WebAuthn does not include support for "direct attestation", if that's what you're referring to. EDIT: Or do you mean "Private Access Token
by DaiPlusPlus 3y ago
Safari's support for WebAuthn does not include support for "direct attestation", if that's what you're referring to.
EDIT: Or do you mean "Private Access Tokens"? I just found out about this now and wow... looks like I've got some reading to do, but so-far it seems far more limited in scope than Google's version, and doesn't seem like it can be used to fingerprint visitors between sessions either. ( https://httptoolkit.com/blog/apple-private-access-tokens-attestation/ https://httptoolkit.com/blog/apple-private-access-tokens-att... )
- jsnell 3y agoI indeed mean PATs. They are not more limited than WEI in any meaningful way. Both could in principle attest anything. Both claim they are meant to attest only certain kinds of properties. They would be just as useful (or useless) for fingerprinting.