ChipTuner on Nostr: I like plain webauthn, there is very little information that needs to be attached or ...
I like plain webauthn, there is very little information that needs to be attached or stored on the remote server on the credential that can I identify you, ideally it's literally just an EC public key. I store a minimal JWK on the user record in the DB. A random ID associated that the device needs to identify the stored cred, an algorithm id, and the X and Y coords. That's it.
