Which extensions (if any) are supported by platform authenticators?

[certainlyNotHeisenberg]

I've struggled to find good information on which WebAuthn extensions (if any) are supported by platform authenticators. Does anyone know where this information might be? Or how to test this?

I'd imagine it depends on how each browser implements the spec. My sense has been the extensions only really apply to roaming authenticators, but I can't find anything concrete either way. I'd really appreciate any help!

(Also posted on the WebAuthn GitHub Issues page.)

[Shane Weeden]

Testing it is fairly straight forward. Use a test RP and include client extension input in registration and assertion ceremonies. I don’t think there is any published doc outlining support. The landscape is still moving quite a lot, even at the WebAuthn spec level. I did hear that the Android platform authenticator may support uvm extension but haven’t tried it recently. Another that seems to be reasonably well supported is credProtect and in Chrome I’ve seen credProps supported. 

Sent from my iPhone

On 9 Oct 2021, at 9:49 am, Liam McCarty <li...@unum.id> wrote:



I've struggled to find good information on which WebAuthn extensions (if any) are supported by platform authenticators. Does anyone know where this information might be? Or how to test this?

I'd imagine it depends on how each browser implements the spec. My sense has been the extensions only really apply to roaming authenticators, but I can't find anything concrete either way. I'd really appreciate any help!

--
You received this message because you are subscribed to the Google Groups "FIDO Dev (fido-dev)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fido-dev+u...@fidoalliance.org.
To view this discussion on the web visit https://groups.google.com/a/fidoalliance.org/d/msgid/fido-dev/da9a4469-66d7-4abe-9382-4334b57e2965n%40fidoalliance.org.