Re: [webauthn] Explicitly restrict NONE aaguid to none attestation only (#1588)

That is weird. At FIDO we don't allow SELF(aka SURROGATE) authenticators to have ZERO AAGUID. All authenticators must have AAGUID, and in case of SELF attestation, in none attestation scenario, AAGUID will be returned, because it can not be used for correlation.

-- 
GitHub Notification of comment by herrjemand
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/1588#issuecomment-806649958 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Thursday, 25 March 2021 12:29:28 UTC