Post

Replies

Boosts

Views

Activity

Comment on get webauthn attestation statement on Safari
I agree with you that the attestation as it stands right now does not serve a useful purpose in the case of passkeys and should be improved upon. However, shouldn't Apple refrain from tampering with how attestations are used in the middle? With the advent of third-party credential provider extension, there may be some attestation types other than "none" that have a sensible use. For Apple to prevent such uses outright does not seem to be WebAuthn specification complaint either.
Topic: Safari & Web SubTopic: General Tags:
Apr ’25
Comment on Passkey Provider Assertion Help
This is very helpful! It's tricky to find. I have a related question. How do we find other info such as attestationPreference through this interface? Is there a way to ASAuthorizationPublicKeyCredentialRegistrationRequest? I don't seem to see how we can achieve this through ASPasskeyCredentialRequest in prepareInterface(forPasskeyRegistration:) for iOS. A more broader question is: do we have access to the WebAuthn extensions in third-party passkey manager? Thanks!
Topic: App & System Services SubTopic: General Tags:
Feb ’24