Re: [webauthn] Make AuthenticatorSelectionCriteria more complete.

Christiaan Brand: want to prevent fragmentation and hence only want generic authenticator selection criteria - not by AAGUID.
Regarding selecting TEE (or SE) backed authenticators: Not a real issue as there might be other ways on the platform to determine whether TEE backed authenticator would be available on the platform.
When making the final decision, the RP can look into attestation to verify whether the keyProtection requirement is met.


-- 
GitHub Notification of comment by rlin1
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/441#issuecomment-431825726 using your GitHub account

Received on Monday, 22 October 2018 18:44:10 UTC