Does FIDO have a method to require keys are stored on devices certified to a certain level?
One thing that concerns me is that if passkeys gain acceptance, certification requirements could be used to block open source/self hosted implementations.
One thing that concerns me is that if passkeys gain acceptance, certification requirements could be used to block open source/self hosted implementations.
yes: https://developers.yubico.com/U2F/Attestation_and_Metadata/
See https://fidoalliance.org/specs/fido-v2.0-ps-20150904/fido-ke... for the FIDO2 attestation specs.