• Natanael@infosec.pub
    link
    fedilink
    English
    arrow-up
    5
    ·
    1 day ago

    Only companies issuing their own passkeys on company hardware has a reason to enable attestation (forcing use of company approved devices throughout). Any public facing service has no reason to use attestation.