To attest or not to attest, this is the question – Provable attestation in FIDO2

ePrint Report: To attest or not to attest, this is the question – Provable attestation in FIDO2

Nina Bindel, Nicolas Gama, Sandra Guasch, Eyal Ronen

FIDO2 is currently the main initiative for passwordless authentication in web servers. It mandates the use of secure hardware authenticators to protect the authentication protocol’s secrets from compromise. However, to ensure that only secure authenticators are being used, web servers need a method to attest their properties. The FIDO2 specifications allow for authenticators and web …

attestation authentication authenticators eprint report fido2 hardware initiative main passwordless passwordless authentication question report servers web