• Natanael@infosec.pub
    link
    fedilink
    English
    arrow-up
    7
    ·
    3 days ago

    Only companies issuing their own passkeys on company hardware has a reason to enable attestation (forcing use of company approved devices throughout). Any public facing service has no reason to use attestation.