3 ms·
Attestation is not provided by the passkey provider itself, but the OS. For example, iOS uses the App Attest service (https://developer.apple.com/documentation
by parliament32 1y ago
Attestation is not provided by the passkey provider itself, but the OS.
For example, iOS uses the App Attest service (https://developer.apple.com/documentation/devicecheck/preparing-to-use-the-app-attest-service https://developer.apple.com/documentation/devicecheck/prepar...). On Android, you get it from Google Play Services (https://developer.android.com/google/play/integrity/overview https://developer.android.com/google/play/integrity/overview) then the built in key attest service (https://developer.android.com/privacy-and-security/security-key-attestation https://developer.android.com/privacy-and-security/security-...). MS Authenticator does all the legwork and returns the results to you at sign-in time.
On Windows, WHFB has this built in (obviously). On macOS, this comes from Platform SSO (https://support.apple.com/en-ca/guide/deployment/dep7bbb05313/web https://support.apple.com/en-ca/guide/deployment/dep7bbb0531...).