Re: [webauthn] Propose SafetyNet as an extension

@selfissued 

As per the attestation definition in the terminology section - "In the WebAuthn context, attestation is employed to attest to the provenance of an authenticator and the data it emits".  

SafetyNet does not attest the provenance of an authenticator or its data, therefore in my opinion it is not really a Webauthn attestation.

It does provide information on platform health, and therefore could be used to enhance other types of attestation.

-- 
GitHub Notification of comment by gmandyam
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/1010#issuecomment-407835585 using your GitHub account

Received on Wednesday, 25 July 2018 17:36:40 UTC