Skip to content

docs: publish the FIDO2 server self-validation results - #133

Merged
Bccorb merged 2 commits into
mainfrom
docs/fido-self-validation
Oct 21, 2026
Merged

Bccorb merged 2 commits into
mainfrom
docs/fido-self-validation

Conversation

@Bccorb

@Bccorb Bccorb commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

Closes fells-code/seamless-auth-api#396.

Adds understand/fido-self-validation.mdx and links it from the security posture page (the pre-1.0 note and Related Docs).

  • FIDO Conformance Tools 1.9.1 (desktop), FIDO2 Server tests, against seamless-auth-api v0.19.3 on 2026-10-21: 159 passed, 0 failed (21.52 s), all test groups selected, Android Keystore the only optional feature. The summary screenshot is included; the tool has no report export (only "Submit results", which was not used).
  • Pass per suite (Req-1, Resp-1 to Resp-9, Resp-A, GetOptions Req-1, Assertion Resp-1 to Resp-3, MDS3).
  • Tests that did not run: optional algorithms the API does not offer, Resp-9 P-3, and Resp-9 P-4 (experimental TPM ES256), which fails on a SimpleWebAuthn TPM parser bug. The upstream issue link will be added before merge.
  • Known deviations: SafetyNet not testable, the test-only /conformance interface and what it skips, the tools' test metadata and roots.
  • Worded as self-validation, with certification deferred to v1.0 (#397).

Checks: lint clean, build 58 pages.

FIDO Conformance Tools 1.9.1 against seamless-auth-api v0.19.3 on 2026-10-21: 159 passed, 0 failed.
Lists the tests that did not run, the known deviations, and links the page from the security page.
@Bccorb
Bccorb merged commit e538caf into main Oct 21, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

docs(fido): publish FIDO conformance self-validation results

1 participant