Re: [webauthn] Change Android SafetyNet attestation type identifier ?

I propose to *replace* the existing SafetyNet with Android "N" 
attestation, since in Android "N", the (1) attestation is computed by 
the Authenticator and (2) the the authenticator includes the public 
key.
In SafetyNet, the App provides a public key to be included and the 
attestation is computed by the platform.  

-- 
GitHub Notification of comment by rlin1
Please view or discuss this issue at 
https://github.com/w3c/webauthn/issues/128#issuecomment-230129657 
using your GitHub account

Received on Sunday, 3 July 2016 01:06:56 UTC