...
These are exemplary paths. You need to screenshot the only passkey-relates relateD options. Please paste screenshots in or outside this table as suitable:
...
- Click the "+" button to create a passkey. Choose the following values:
- RP Info: This domain
- User Info: Bob
- Attachment: Undefined
- Require Resident Key: True
- Resident Key (L2): Required
...
| Seq1 |
In Chrome |
|
After switching to Fingerprint |
Second time | ||
| Seq2 (just new screens) |
On Use ES***, Use EdDSA |
After Cancel | ||||
| Seq3 (just new screens) |
Chrome on timeout of the creation form | |||||
| Seq4 (just new screens) |
Place one row after each?
Test User Verification
- Select User Verification: Discouraged and click CREATE.
- Follow the requested steps to create a passkey, then copy-paste the result from the web app.
...
- Select User Verification: Required and click CREATE.
- Follow the requested steps to create a passkey, then copy-paste the result from the web app.
- Note that the latest result is the rightmost in the bottom row. You may delete already pasted results.
- All authenticators should be able to register multiple passkeys for the same domain, so you do not need to delete the previously created one. Is this creation of multiple passkeys or an override of the old one?It is likely that the passkeys you create will override each other since they are for the same domain and use the same user name "bob@example.com").
Copy-paste the result on the right: | bob@example.comCredential ID RP ID AAGUID Credential Registration Data [more details] Last Authentication Data [more details] |
|---|
...
- If none of the previous four tries worked,:
- Select Attestation: Undefined and click CREATE.
- Follow the requested steps to create a passkey, then copy-paste the result from the web app.
- Otherwise, skip this step???.
Copy-paste the result on the right: | bob@example.comCredential ID RP ID AAGUID Credential Registration Data [more details] Last Authentication Data [more details] |
|---|
...
- If Attestation: Direct worked, select it. Otherwise, if Attestation: Indirect worked, select it. What about None? OtherwiseOtherwise, select Attestation: Undefined.Should they say which they used?
Test CredProtect Extension
...
- If none of the previous three tries worked,:
- Select CredProtect Extension: Undefinedand click CREATE.
- Follow the requested steps to create a passkey, then copy-paste the result from the web app.
- Otherwise, skip this step???.
Copy-paste the result on the right: | bob@example.comCredential ID RP ID AAGUID Credential Registration Data [more details] Last Authentication Data [more details] |
|---|
...
Do you have any additional observations or comments related to the entire procedure:{125{ | The same as for Firefox, except for the extra first screen. It would be interesting to try to select eg ES512 or EdDSA and also RS256 and see what a security keay would choose. |
|---|
}}
- Please , do not forget to paste any pending screenshots in the above tables.
- You may also paste the screenshot with the passkey(s) created during this test. The list of created passkeys is usually shown along with platform or browser passkey options that you were already asked to screenshot.