Windows WebAuthn integration should avoid requesting direct attestation when not required |
||
Issue descriptionThe Windows 10 WebAuthn integration currently always asks for direct attestation and strips the attestation statements afterwards if the site didn't request it. We should only ask the Windows API for attestation if the RP requests it because generating the attestation in the TPM might be expensive.
,
Jan 17
(6 days ago)
|
||
►
Sign in to add a comment |
||
Comment 1 by bugdroid1@chromium.org
, Jan 17 (6 days ago)