[webauthn] U2F Attestation only lists Basic Attestation as supported

• From: Rolf Lindemann via GitHub <sysbot+gh@w3.org>
• Date: Mon, 03 Apr 2017 11:08:55 +0000
• To: public-webauthn@w3.org
• Message-ID: <issues.opened-218900031-1491217733-sysbot+gh@w3.org>

rlin1 has just created a new issue for https://github.com/w3c/webauthn:

== U2F Attestation only lists Basic Attestation as supported ==
See section 7.6 "FIDO U2F Attestation Statement Format"
Attestation types supported: Basic

In principle the authenticator could also generate self-signed attestation certificates which meet the definition of self-attestation as described in section 5.3.3.
Plus the current Mozilla Firefox U2F implementation uses this concept.

So I suggest adding self-attestation of the list of supported attestation types in section 7.6.


Please view or discuss this issue at https://github.com/w3c/webauthn/issues/392 using your GitHub account

Received on Monday, 3 April 2017 11:09:01 UTC