Emil Lundberg

The `android-key` attestation statement format is not yet supported. We have not yet ran the FIDO conformance tests. Sorry, we don't currently have a plan for when we'll do either...

Hi! There is currently no way to do this, it's not supported by WebAuthn. There is some possibility there might be a way in the future, see: https://github.com/w3c/webauthn/issues/1827#issuecomment-1352262450 . But...

Something like that should work only as long as you don't change the `"online.my-domain2.com"` argument. But yes, if you register credentials to one RP ID then you have to authenticate...

Hi! Sorry, there is no progress that I know of.

Thank you for the report. This seems related to #26.

I'm afraid I don't have a timeline at this time, no. Does the `yubico-piv-tool` CLI (included in the installation directory) detect the YubiKey? For example, what output does `yubico-piv-tool.exe -a...

From WG call 2023-02-08: Looks like no further action is needed here.

Fixed in #1663.

I think that in practice, the majority of RPs will most likely use an external library to implement WebAuthn signature verification. In that case they usually shouldn't have to do...

I'm seeing no objection, so I'm closing this.