Topic from June F2F meeting With the changing security properties of WebAuthn credentials, we need to re-evaluate the need for an RP to request attestation during a Get Assertion. <placeholder for discussion>