Re: [webauthn] Drop assertion-time attestation. (#1997)

> Does that imply that device-bound keys in the "supplemental keys" extension cannot be attested?

No, they certainly can be. This change just reduces the number of places that can have attestations at assertion time from three to two.

-- 
GitHub Notification of comment by agl
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/1997#issuecomment-1813193194 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 15 November 2023 20:11:35 UTC