Bug 261340 - Set a non-zero AAGUID for platform credentials where attestation=none
Summary: Set a non-zero AAGUID for platform credentials where attestation=none
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKit Misc. (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2023-09-08 10:27 PDT by pascoe@apple.com
Modified: 2023-10-19 11:17 PDT (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description pascoe@apple.com 2023-09-08 10:27:19 PDT 
The other FIDO platforms return non-zero values in this case, making us unique by having all zeros. This assigns a random, fixed, AAGUID instead.
Comment 1 pascoe@apple.com 2023-09-08 10:29:28 PDT 
rdar://115125044
Comment 2 pascoe@apple.com 2023-09-08 10:40:41 PDT 
https://github.com/WebKit/WebKit/pull/17599
Comment 3 pascoe@apple.com 2023-10-18 13:04:29 PDT 
I've filed https://bugs.webkit.org/show_bug.cgi?id=263333 to finish ripping out attestation code.
Comment 4 EWS 2023-10-19 11:17:33 PDT 
Committed 269536@main (711e9d271fec): <https://commits.webkit.org/269536@main>

Reviewed commits have been landed. Closing PR #17599 and removing active labels.