W3C home > Mailing lists > Public > public-webauthn@w3.org > July 2018

Re: [webauthn] SafetyNet response as an extension

From: John Bradley via GitHub <sysbot+gh@w3.org>
Date: Wed, 25 Jul 2018 17:38:31 +0000
To: public-webauthn@w3.org
Message-ID: <issue_comment.created-407836365-1532540305-sysbot+gh@w3.org>
The soon to be released Android platform authenticator is currently using Safty Net attestations.  At least on my test Pixel.  So there will be a broadly deployed authenticator using that format.   Removing validation from the server needs significant discussion.

GitHub Notification of comment by ve7jtb
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1011#issuecomment-407836365 using your GitHub account
Received on Wednesday, 25 July 2018 17:39:05 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:58:52 UTC