search

tweag / webauthn

A library for parsing and validating webauthn/fido2 credentials
Apache License 2.0
34 stars 11 forks source link

FidoU2F attestation always results in `AttestationTypeSelf` even when not selfsigned #45

Closed ErinvanderVeen closed 2 years ago

ErinvanderVeen commented 2 years ago

Describe the bug FidoU2F attestation always results in AttestationTypeSelf even when not selfsigned

To Reproduce Perform FidoU2F Attestation with a non-self signing authenticator

Expected behavior AttestationTypeBasic or some other form of Attestation should be resulted in.

infinisil commented 2 years ago

Note that AttestationTypeUncertain should be returned in general. Self is not supported by fido-u2f