why shouldn’t we tell people to boycott the tech until then?
because attestation the conspiracy to use attestation has not activated and i believe the damage is too small even if it did; i’ve argued how TPM reliance would be impossible for a very long time.
that doesn’t solve the threat of a hardware attestation toggle.
just like how Let’s Encrypt made acquiring certs (essentially a requirement for new websites now thanks to HTTPS, just like what you say passkey attestation is) extremely easy, the equivalent for passkeys would make new attestation providers quite easy, since the equivalent authority would be trusted
I disagree.
Why so? What about passkey attestation requires each user to issue a certificate?
So why shouldn’t we tell people to boycott the tech until then? Even then, that doesn’t solve the threat of a hardware attestation toggle.
I disagree.
because attestation the conspiracy to use attestation has not activated and i believe the damage is too small even if it did; i’ve argued how TPM reliance would be impossible for a very long time.
just like how Let’s Encrypt made acquiring certs (essentially a requirement for new websites now thanks to HTTPS, just like what you say passkey attestation is) extremely easy, the equivalent for passkeys would make new attestation providers quite easy, since the equivalent authority would be trusted
Why so? What about passkey attestation requires each user to issue a certificate?