← Back to context

Comment by lxgr

6 days ago

That's not a fair reading of that comment, in my view (assuming you mean https://github.com/keepassxreboot/keepassxc/issues/10407#iss...).

I read it as "your actions might push relying parties to use attestation to be able to block you", not as "we, the FIDO consortium will block you". (How could they? There's no signer identity to block without attestation!)

That said I don't agree with the substance of the comment; it's effectively an appeal to security by obscurity/unavailability of user-friendly insecure export methods.