Comment by hedgedoops2
7 days ago
Passkey attestation is trusted computing.
The equivalent of 'owner override' is user access to all secrets.
As with TC, one could have all the user-protecting aspects without any of the user-limiting aspects, by implementing suitable owner override / by enabling users to know all secrets.
Trusted computing without attestation is definitionally not trusted computing anymore.