Comment by madeofpalk
7 days ago
No browser or consumer password manager implements attestation. There's no need for users to know something that's simply not relevant for them.
7 days ago
No browser or consumer password manager implements attestation. There's no need for users to know something that's simply not relevant for them.
Then remove it from the spec and everyone is happy. I don't trust big tech companies to not use this feature if it is available. They have too much incentive to be the sole gatekeeper for your ability to log in to services.
To remove it from the spec you would need to get enought votes in the FIDO alliance workgroups and board and whatnot. That's just politics.
Not if fear-mongering articles like this become widely circulated and make people believe attestation is widely used.