User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36

Steps to reproduce:

Firefox 90.0.2 version on Windows 10:
In the navigator.credentials.create() API, provide the attestation value as "none" .

Actual results:

The response from this API returns the fmt attribute of the attestationobject as "fmt": "packed".

Expected results:

An attestationobject with "fmt": "none" is expected.

This happens everytime. This is not intermittent.

Aloha,

I believe the attestation default is also none, as the examples I see don't set it and neither do we, but every platform but windows 10 returns none for us..

However, with windows 10, firefox returns it packed, and the ruby webauthn gem rejects the envelope due to trustworthy?(aaguid: authenticator_data.aaguid) check failing in the gem (exception is WebAuthn::AttestationStatementVerificationError). To summarize, users can't register new yubikeys because it gets rejected here: https://github.com/cedarcode/webauthn-ruby/blob/master/lib/webauthn/attestation_statement/packed.rb#L18

If Firefox returned the format as none like it does on linux, OSX, etc. it would fix this issue.

+1 this is a high priority issue please

https://hg.mozilla.org/mozilla-central/rev/3bd9ebdd7631