you guys are lucky... you almost became a Microsoft font 😂https://devblogs.microsoft.com/commandline/wp-content/uploads/sites/33/2019/09/cascadia-code-twitter-poll.png
Wow! That was close :-)
Hi @grzuy that's correct - we've been in touch Yubico about a couple of things and among others they recommended we require attestation during our registration flow. I've asked them why since they don't publish to the FIDO MDS, to my knowledge to don't even self-publish metadata. Best I could find was https://developers.yubico.com/U2F/Attestation_and_Metadata/ for U2F. Long story short, as long as we employ WebAuthn for 2FA only we don't see the added value at Shopify, but for a potential usernameless & passwordless flow we see the potential for metadata to safeguard users from compromised authenticators similar to HaveIBeenPwned for passwords. I haven't heard back from them yet, but at the moment the MDS does not feels not very useful.
SoloKeys self publishes over at https://github.com/solokeys/solo/tree/master/metadata - according to solokeys/solo#89 publishing on the MDS was too expensive for them, but that can't be a problem for Yubico
also finished extracting the metadata client: https://github.com/bdewater/fido_metadata
This is awesome :rocket: !!!!
Nice, we were actually talking about that yesterday with Gonzalo :muscle: I think he saw it on Twitter yesterday
This is awesome!
haha! good luck :D
Thank you very much! It went well. We got lot of positive feedback.
People gets excited about WebAuthn which is cool.