> It doesn’t matter if other authenticators could work if a relying party refuses to allow its users to use them. You keep repeating that, but that's not possi

> It doesn’t matter if other authenticators could work if a relying party refuses to allow its users to use them. You keep repeating that, but that's not possible anymore, since both Apple and Google removed attestation from their respective passkey/WebAuthN implementations. For details, see https://news.ycombinator.com/item?id=42522490 https://news.ycombinator.com/item?id=42522490.