Post

Replies

Boosts

Views

Activity

Comment on get webauthn attestation statement on Safari
I agree with you that the attestation as it stands right now does not serve a useful purpose in the case of passkeys and should be improved upon. However, shouldn't Apple refrain from tampering with how attestations are used in the middle? With the advent of third-party credential provider extension, there may be some attestation types other than "none" that have a sensible use. For Apple to prevent such uses outright does not seem to be WebAuthn specification complaint either.
Topic: Safari & Web SubTopic: General Tags:
Apr ’25
Comment on Passkey Provider Assertion Help
This is very helpful! It's tricky to find. I have a related question. How do we find other info such as attestationPreference through this interface? Is there a way to ASAuthorizationPublicKeyCredentialRegistrationRequest? I don't seem to see how we can achieve this through ASPasskeyCredentialRequest in prepareInterface(forPasskeyRegistration:) for iOS. A more broader question is: do we have access to the WebAuthn extensions in third-party passkey manager? Thanks!
Topic: App & System Services SubTopic: General Tags:
Feb ’24
Comment on get webauthn attestation statement on Safari
I agree with you that the attestation as it stands right now does not serve a useful purpose in the case of passkeys and should be improved upon. However, shouldn't Apple refrain from tampering with how attestations are used in the middle? With the advent of third-party credential provider extension, there may be some attestation types other than "none" that have a sensible use. For Apple to prevent such uses outright does not seem to be WebAuthn specification complaint either.
Topic: Safari & Web SubTopic: General Tags:
Replies
Boosts
Views
Activity
Apr ’25
Comment on Passkey Provider Assertion Help
This is very helpful! It's tricky to find. I have a related question. How do we find other info such as attestationPreference through this interface? Is there a way to ASAuthorizationPublicKeyCredentialRegistrationRequest? I don't seem to see how we can achieve this through ASPasskeyCredentialRequest in prepareInterface(forPasskeyRegistration:) for iOS. A more broader question is: do we have access to the WebAuthn extensions in third-party passkey manager? Thanks!
Topic: App & System Services SubTopic: General Tags:
Replies
Boosts
Views
Activity
Feb ’24
Comment on Xcode 15, how to uncheck "Connect via network" for physical device?
Quinn wrote: iTarek wrote: We need option to disable "Connect via network" As discussed above, that’s not really possible with the current architecture. It's odd to have a flag exposed to the user but cannot be toggled. This feels like to half-baked idea to me, and needs to be evolved. Joshua
Replies
Boosts
Views
Activity
Jan ’24
Comment on Xcode 15, how to uncheck "Connect via network" for physical device?
Thanks to Quinn for pointing out that connecting via networking includes going over USB! In my case, the slowness was indeed due to WiFi/Bluetooth. Given that USB is effectively faster, why doesn't Apple make it to connect via the fastest network by default? Or, at least, give developers an option to pick which way to go.
Replies
Boosts
Views
Activity
Jan ’24