Re: [webauthn] Remove attestation specification from spec

No - my comment was "that can be done via a registry (pointing to an 
outside specification if necessary)."  The registry would have to 
point to normative content (i.e. "outside specification").

SafetyNet is already outdated; Android N attestation should be 
encouraged.  I don't think we favors for anyone pointing to 
attestation formats that are poorly defined and replaceable.

-- 
GitHub Notification of comment by gmandyam
Please view or discuss this issue at 
https://github.com/w3c/webauthn/issues/108#issuecomment-235985788 
using your GitHub account

Received on Thursday, 28 July 2016 18:37:50 UTC