@Engineer but your app itself may start getting rate-limited What is the rate above which attestKey() calls may start getting rate-limited?

are you still able to validate the oversized attestation objects? Yes what was the size you were seeing before, and what is it now? According to our network engineers, who have visibility over request sizes, the request sizes of our attestation requests were previously around 3750 bytes, then they increased to around 5250 bytes. The firewall's max request length rule was set to 5000 bytes, so it began blocking those requests. The request contains just a few headers; the bulk of the request size is attributable to the Base64-encoded attestation object.