Adam Langley
Adam Langley
> Therefore, it is hoped that from the "PublicKeyCredentialCreationOptions" before creating credentials at registration, it can be defined whether origin verification is required. If it is not required, the browser...
You can force push to zacknewman:main to change the contents of this PR.
Thanks for that. I think from the [definition of effective domain] we want to skip the second step, yes? Is there a standard name for "the origin's host or null...
> instead of an ordered list, consider allowing enterprise attestation to "fall back" to direct attestation if an enterprise attestation cannot be generated. Chromium now does this so, as we...
I spoke with Arnar and yes, it does seem that these two attestation methods are incorrectly categorized.