4 ms·
How is it "completely, absolutely impractical outside of a closed org" when I thought Google attests every passkey created on Android? https://www.w3.org/TR/we
by conradev 1y ago
How is it "completely, absolutely impractical outside of a closed org" when I thought Google attests every passkey created on Android?
https://www.w3.org/TR/webauthn-3/#sctn-android-key-attestation https://www.w3.org/TR/webauthn-3/#sctn-android-key-attestati...
Apple would too, if it were not for iCloud Keychain syncing:
https://news.ycombinator.com/item?id=43988852 https://news.ycombinator.com/item?id=43988852
My understanding is that servers can block passkeys from insecure Android devices today if they wanted to.
- timmyc123 1y ago> How is it "completely, absolutely impractical outside of a closed org" when I thought Google attests every passkey created on Android? Passkeys in Google Password Manager are not attested. There is no known synced passkey credential manager that creates attested passkeys.