Once verified, this attestation guarantees that an authentic Apple device performed the WebAuthn registration ceremony, but it does not guarantee the operating system running on that device is untampered. Face ID and Touch ID for the web offers Apple Anonymous Attestation. WebKit should work with Attestation, as this blogpost said:Īttestation is an optional feature which provides websites a cryptographic proof of the authenticator’s provenance such that websites that are restricted by special regulations can make a trust decision.
Yubico demo site uses Attestation by default (to detect YubiKey model), which explains why it's failing. Upon further testing with the website (which gives more options to test), I found that if I let "Attestation Type" to be "None", the registration will success, but if it was set to "Direct" or "Indirect", the registration fails. I then tried other browsers like Google Chrome and Microsoft Edge, they all worked. WebAuthn with Touch ID and Attestation not working on ARM Macs (Safari) I found this issue when I tried to enroll my fingerprint on the Yubico demo site () with Safari:
0 kommentar(er)
