home.social

Search

3 results for “iinuwa”

  1. Reading the docs on Credential Guard and Windows Hello ESS again, it seems that the secrets themselves are not protected by VBS at all. Credential Guard protects online secrets (SSO credentials), and ESS protects the channel between the sensor and OS as well as the the biometric template itself.

    The WebAuthn secrets that is released based on the biometric sensor response seems _not_ to be protected by VBS, which is sad.

    Can anyone confirm?