Hacker News Reader

> Does FIDO have a method to require keys are stored on devices certified to a certain level?

yes: https://developers.yubico.com/U2F/Attestation_and_Metadata/

This is for U2F, which is not FIDO2, though FIDO2 is backward compatible with U2F with a limited set of features. U2F-only hardware is not compatible with the passkeys model.

See https://fidoalliance.org/specs/fido-v2.0-ps-20150904/fido-ke... for the FIDO2 attestation specs.

Reply on news.ycombinator.com