| ▲ | maratc 2 hours ago | |
> When it is present, WebAuthn attestation tells the site the make and model of the authenticator, identified by its AAGUID, with a certificate chain from the vendor to back it up. Me: The person who posted this post critical of The King on Facebook was totally not me! Police: Here's "a WebAuthn attestation" that told Facebook "the make and model of the authenticator, identified by its AAGUID, with a certificate chain from the vendor to back it up" and it fits Evidence A. No thanks. | ||
| ▲ | jeroenhd an hour ago | parent [-] | |
As if the police in a corrupt state are going to check the public fingerprint of your passkeys. Your account identifier is proof enough. The make and model of your authenticator is shared with about 2 million other Yubikeys, if anything they'll compare your public key, not the attestation process. | ||