Re: [webauthn] U2F Attestation Statement Format does not define "self attestation" steps

Unclear if this will be used. In practice, I don't know of any U2F tokens that do self-attestation via an X.509 certificate. It _is_ possible that a soft-token could do this, but a soft-token could also return a webauthn self attestation directly, rather than going via U2F.

-- 
GitHub Notification of comment by agl
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/745#issuecomment-362031036 using your GitHub account

Received on Wednesday, 31 January 2018 18:48:08 UTC