Re: [webauthn] TPM Attestation Statement Format: Missing COSE Key algorithm Identifier and clarification.

Double-checking: does the existence of SHA-1 collisions make these attestations fundamentally insecure? If so, it probably doesn't make sense to support RPs trusting them. If not, please ignore me. :)

-- 
GitHub Notification of comment by jyasskin
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/689#issuecomment-344741020 using your GitHub account

Received on Wednesday, 15 November 2017 21:54:35 UTC