Re: [webauthn] add notion of "enterprise" attestation (#1147)

I'm a bit confused as to the purpose still. Is this meant to be a way for organizations to do some subset of: 
1. attest that an authenticator was supplied by them
2. attest that an authenticator is co-located on a platform managed by them
3. allow for an organization to associate additional attributes with authenticators supplied/managed by them
4. retrieve a unique identity of an authenticator (aka serial #)
5. short circuit the user user consent within zones configured by policy on the client platform
6. represent the concept of an organization's zone (as sanctioned RPIDs) within a supplied/managed authenticator


-- 
GitHub Notification of comment by dwaite
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1147#issuecomment-486495512 using your GitHub account

Received on Thursday, 25 April 2019 02:23:52 UTC