W3C home > Mailing lists > Public > public-webauthn@w3.org > July 2018

[webauthn] SafetyNet response as an extension

From: gmandyam via GitHub <sysbot+gh@w3.org>
Date: Wed, 25 Jul 2018 16:56:21 +0000
To: public-webauthn@w3.org
Message-ID: <issues.opened-344526557-1532537780-sysbot+gh@w3.org>
gmandyam has just created a new issue for https://github.com/w3c/webauthn:

== SafetyNet response as an extension ==
Given (a) SafetyNet response is not really an attestation to the WebAuthn credential, and (b) Android Keystore provides attestation responses related to keys that can be created and managed by a trusted execution environment, and (c) lack of ubiquity of SafetyNet in Android ecosystem - it is proposed that the SafetyNet response be offered as a client extension.  This could in turn lead to also removing SafetyNet as an attestation format.

See https://github.com/w3c/webauthn/pull/1010.

Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1011 using your GitHub account
Received on Wednesday, 25 July 2018 16:56:48 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:58:52 UTC