• Natanael@infosec.pub
    link
    fedilink
    English
    arrow-up
    6
    ·
    2 days ago

    Only companies issuing their own passkeys on company hardware has a reason to enable attestation (forcing use of company approved devices throughout). Any public facing service has no reason to use attestation.