[reginald78]

They're probably just trying to not get their implementation blackballed with the attestation feature like one of the FIDO devs immediately threatened to do to keepass: https://github.com/keepassxreboot/keepassxc/issues/10407

I think the dance is all for naught though, they'll end up locked out as non-standard once uptake is high enough IMO.

[shmerl]

The control freak approach proponents will push for it I'm sure. There should be more push against it though.

[timmyc123]

> one of the FIDO devs immediately threatened to do to keepass

Wild that you (and a few others) continue to make these accusations about me in these comments (and in other venues).

1) I've been one of the most vocal proponents of synced passkeys never being attested to ensure users can use the credential manager of their choice

2) What makes you think I have any say or control over the hundreds of millions of websites and services in the world?

Enough with this bullshit.