-
Notifications
You must be signed in to change notification settings - Fork 77
Open
Description
Firefox doesn't support cred protect. It can be verified by using the https://webauthn.me/debugger with credentialProtectionPolicy = userVerificationRequired, e.g. extensions are empty ({}) and there isn't attestedExtensionData. In Chrome, the result is:
"attestedExtensionData": {
"credProtect": 3
}
extensions: {
"credProps": {
"rk": true
}
}
Can this bugzilla issue be prioritized please? Cred Protect is the mitigation for ysa-2024-03/.
Metadata
Metadata
Assignees
Labels
No labels