passkey attestation blob in registration response

Question

testuser7 OP

Created Jun ’24

Replies 1

Boosts 0

Participants 2

Hello,

Is it correct that right now when any passkey-provider prepares the passkey registration ceremony response with attestation, iOS strips off the attestation before handing over response-assertion to the client.

Does this stripping off of attestation have to do anything with the BS and BE flags that are populated by passkey-provider ? Meaning, is it correct statement that iOS removes the attestation blob from the response if the BE and BS flags are set to zero ??

Answered by Systems Engineer in 793255022

The passkey provider API does not modify the responses returned to it. It does apply some validation logic to those responses, but anything that doesn't pass the validation will return an error to the passkey provider. If it passes, it will go through unmodified.

Boost

Answer 1

Systems Engineer OP

Apple

Jun ’24

Recommended

The passkey provider API does not modify the responses returned to it. It does apply some validation logic to those responses, but anything that doesn't pass the validation will return an error to the passkey provider. If it passes, it will go through unmodified.

0