As the article says, there are but it's still rare. But the capability exists, it's in the spec. And you know how this goes - now that this is possible, they just need to onboard enough users and then start progressively shoving it down the throats of the rest. What are you gonna do, not use major internet services?
They'd currently also have to give up on Apple users. Apple has made a strong case that they will not support attestation on consumer devices because they see it as a consumer privacy violation. (They support it on enterprise-managed devices only.)
This is ignorant fearmongering. Attestation has existed for decades, for enterprise use cases. Now decades later, people discovering attestation for the first time are panicking. If you had panicked a decade ago, that reaction might have had more merit.
Ah! Are there any that require that?
As the article says, there are but it's still rare. But the capability exists, it's in the spec. And you know how this goes - now that this is possible, they just need to onboard enough users and then start progressively shoving it down the throats of the rest. What are you gonna do, not use major internet services?
They'd currently also have to give up on Apple users. Apple has made a strong case that they will not support attestation on consumer devices because they see it as a consumer privacy violation. (They support it on enterprise-managed devices only.)
Why though? What's the objective, and why are passkeys the easiest way to achieve that objective?
8 replies →
This is ignorant fearmongering. Attestation has existed for decades, for enterprise use cases. Now decades later, people discovering attestation for the first time are panicking. If you had panicked a decade ago, that reaction might have had more merit.
1 reply →