Re: [webauthn] Attestation validation issues

@emlun 

I would go even further than that.  SafetyNet is the only attestation format in the spec that is not specific to the credential itself.  In my opinion, it makes more sense as an extension than as a Webauthn attestation.  For instance, see the discussion in https://github.com/w3c/webauthn/issues/438.

-- 
GitHub Notification of comment by gmandyam
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/950#issuecomment-397689261 using your GitHub account

Received on Friday, 15 June 2018 17:25:49 UTC