you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 17 hours ago*

Mozilla's warning is funny. "Don't use this to reject attestations from unapproved authenticators!" That's, like, almost the entire purpose to attestation. It tells you an Apple device or a YubiKey or whatever created the credential. What else could you use this information for other than to make life harder for users using certain authenticators?

  • source
  • parent