4 ms·
Attestation statements can be used to restrict WebAuthn use to certain hardware keys only.
by _1tem 2y ago
Attestation statements can be used to restrict WebAuthn use to certain hardware keys only.
- hamandcheese 2y agoBut is there a chain of trust going all the way back to the manufacturer? Or is that simply metadata which could be spoofed?
- gruez 2y agoYes. That's what attestation is for.