4 ms·
If you rely on Attestation, all you have to do is use Private Access Tokens: https://developer.apple.com/news/?id=huqjyh7k https://developer.apple.com/news/?id=
by overstay8930 3y ago
If you rely on Attestation, all you have to do is use Private Access Tokens: https://developer.apple.com/news/?id=huqjyh7k https://developer.apple.com/news/?id=huqjyh7k
- lxgr 3y agoThat's (anonymous) device attestation, not authentication key/credential attestation. Two completely different use cases. One prevents against spam/bots, the other prevents against users getting phished/scammed into registering an attacker's credential on their account (or using an insecure credential that can later be phished/hacked, e.g. because it's not hardware-bound and easily exportable).