Re: [webauthn] devicePubKey extension MUST be supported if multi-device WebAuthn credentials are used (#1691)

> > And while we're at it, flags for platform/roaming would be nice.
> 
> I believe you can accomplish this by checking getTransports() for `internal`. We will eventually/hopefully have authenticators which are both platform and capable of roaming (e.g. a phone used as an authenticator for other clients over a wire/network/proximity protocol in addition to having integrated platform support)

IIRC this is not signed and can be tampered with. 

-- 
GitHub Notification of comment by Firstyear
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1691#issuecomment-1020691564 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 25 January 2022 00:39:25 UTC