Re: [webauthn] Allow `platform`-based self attestation with non-zero AAGUID when `AttestationConveyancePreferenceOption` `"none"` is used (#2146)

Yeah, I think it is. I didn't know #1962 was still open until after I opened this and submitted a PR. [This commit](https://github.com/w3c/webauthn/commit/88905f28a2120959b4b51691759727f5724cff02) was made that added:

> 2. If _authenticator_ is not a [platform authenticator](https://w3c.github.io/webauthn/#platform-authenticators) then replace the [aaguid](https://w3c.github.io/webauthn/#authdata-attestedcredentialdata-aaguid) in the [attested credential data](https://w3c.github.io/webauthn/#attested-credential-data) with 16 zero bytes.

however that PR did not address the attestation aspect which #2150 does.

-- 
GitHub Notification of comment by zacknewman
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2146#issuecomment-2372647914 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 25 September 2024 00:54:10 UTC