Re:Tailscale doesn't want your password
by JohnFen on Thursday June 08, 2023 @06:45PM
(#36250283)
Attestation can be more detailed than just what brand of hardware key you use. Banks probably don't care.
But attestation also informs what the capabilities are. What banks (or others) might care about is whether or not you're using a TPM or equivalent to store your key in, and attestation can tell them that.
Re:Tailscale doesn't want your password
by drdaeman on Friday June 09, 2023 @12:39AM
(#36253234)
Fortunately, it seems that major providers don't support attestation. If no one provides attestation capabilities, no one would request it, not even someone as anti-user as a bank.
But attestation also informs what the capabilities are. What banks (or others) might care about is whether or not you're using a TPM or equivalent to store your key in, and attestation can tell them that.