search

Fido2me / fido2me

Other
3 stars 0 forks source link

Device description is empty, if AAGUID is zeroed or not in MDS #16

Closed dbalikhin closed 1 year ago

dbalikhin commented 2 years ago

It looks like Mac AAGUID is not in the MDS records and Browsers on Android return zeroed AAGUID. It results in an empty Device Description on the Devices page.

As a workaround, we can hardcode Mac AAGUID, but it is not clear what to do with zeroed AAGUID. Probably just use some const value for such cases.

dbalikhin commented 1 year ago

Don't rely on attestation.

  1. Privacy feature can block sending real AAGUID
  2. Mane software authenticators will send zeroed value
  3. Take db space
  4. Passkeys will provide zeroed value - based on some observations

Solution: Simply ask to provide a name for added device as a mandatory field Drop attestation. Doesn't work well on Linux anyway