[webauthn] SafetyNet Attestation Clarifications

apowers313 has just created a new issue for https://github.com/w3c/webauthn:

== SafetyNet Attestation Clarifications ==
Splitting off the SafetyNet conversation from #950, as requested during the last call.

I think the questions are:

1. What is `ver` and how is it verified and / or used during verification?
2. Where do we find the root cert for SafetyNet?
3. What value gets put in the SafetyNet `nonce` (not part of #950, but perhaps some clarification is needed)?

cc: @agl @christiaanbrand @leshi @kpaulh

Please view or discuss this issue at https://github.com/w3c/webauthn/issues/968 using your GitHub account

Received on Saturday, 23 June 2018 15:33:29 UTC