Determine 'trusted authenticators' switch at runtime
Basics
Logistics
Basics
Logistics
Description
The predicate used to ‘ask for' attestation is dynamic and could be different for different types of users. However, the check that determines if the authenticator is trusted based on this attestation is global, either on or off. This is because it is a flag inside the Yubico RelyingParty object that is set on initialisation of the RP object. I’ll check if there is a way to set this per registration.
The predicate used to ‘ask for' attestation is dynamic and could be different for different types of users. However, the check that determines if the authenticator is trusted based on this attestation is global, either on or off. This is because it is a flag inside the Yubico
RelyingParty
object that is set on initialisation of the RP object. I’ll check if there is a way to set this per registration.As suggested by @Shannon Roddy.