attestation

Passkey attestation answers a different question from signing in

WebAuthn attestation concerns an authenticator’s provenance during registration. Separate it from the proof used at sign-in and consider the privacy trade-off.