3 ms·
> If you want remote attestation, Safari already has it No, Safari/Apple gave up on remote attestation when they introduced passkeys, except for MDM devices wh
by lxgr 1y ago
> If you want remote attestation, Safari already has it
No, Safari/Apple gave up on remote attestation when they introduced passkeys, except for MDM devices where the MDM profile can allow attestation for RP domains on an opt-in basis.
- jesseendahl 1y ago>except for MDM devices where the MDM profile can allow attestation for RP domains on an opt-in basis. And even then, the attestation you get in that scenario is just an attestation that the passkey was created on a managed device. It is not a hardware/device attestation.
- lxgr 1y agoBut only Apple devices can be managed, and presumably that’s in turn attested to by Apple cryptographic keys in hardware?