Attestation

[Ashly Schwan]

I tested my windows machine and I get the format as TPM attestation format and I reconfigured the windows hello after that I got the Packed attestation format.This means my machine improving the security feature? Can you please explain why this happening

[Shane Weeden]

The packed attestation format is most likely actually a “Self” attestation type (which is a variant of the packed attestation format). See: 

https://w3c.github.io/webauthn/#sctn-packed-attestation

https://w3c.github.io/webauthn/#self

I’m not from Microsoft, and not an SME on Windows Hello, but from experience I can say there can be several reasons why you get self attestation rather than the TPM attestation, and none of those reasons is “improving the security feature”. 

On 30 Sep 2024, at 7:49 am, Ashly Schwan <ashlym...@gmail.com> wrote:

I tested my windows machine and I get the format as TPM attestation format and I reconfigured the windows hello after that I got the Packed attestation format.This means my machine improving the security feature? Can you please explain why this happening

--
You received this message because you are subscribed to the Google Groups "FIDO Dev (fido-dev)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fido-dev+u...@fidoalliance.org.
To view this discussion on the web visit https://groups.google.com/a/fidoalliance.org/d/msgid/fido-dev/1ef5b0c0-119e-475f-8086-fa23a2f51fcen%40fidoalliance.org.