- From: gmandyam via GitHub <sysbot+gh@w3.org>
- Date: Wed, 25 Jul 2018 16:56:21 +0000
- To: public-webauthn@w3.org
gmandyam has just created a new issue for https://github.com/w3c/webauthn: == SafetyNet response as an extension == Given (a) SafetyNet response is not really an attestation to the WebAuthn credential, and (b) Android Keystore provides attestation responses related to keys that can be created and managed by a trusted execution environment, and (c) lack of ubiquity of SafetyNet in Android ecosystem - it is proposed that the SafetyNet response be offered as a client extension. This could in turn lead to also removing SafetyNet as an attestation format. See https://github.com/w3c/webauthn/pull/1010. Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1011 using your GitHub account
Received on Wednesday, 25 July 2018 16:56:48 UTC