Attestation
AssessTechniques
A WebAuthn feature that can provide cryptographic information about the authenticator model or vendor.
Why it's here
Placed in Assess: 1 article(s) of evidence from 1 source(s), led by security coverage, with 1 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.
Evidence (1)
- 6Hacker News·10/14/2026securityPasskeys Are Not a Trap
The article argues that recent criticisms of passkeys overstate the risks of attestation and misrepresent how it works in practice. It says most synced passkeys do not provide attestation, while passkeys still offer stronger phishing resistance than TOTP codes and passwords.