Preventing registration on multiple devices

[mar1n3r0]

Description

I have read the considerations about avoiding turning webauthn into a super cookie but the whole point of biometrics is to be able to identify a user on many devices. So imagine the following use case. You are developing a wallet for universal basic income. To avoid malicious behavior you want to make sure a user can register only once and can't get new wallets from new devices. Is there a way to achieve that while maintaining the security per device? Is it possible to avoid tracking while covering this use case?

[timcappalli]

@mar1n3r0 this repo is for WebAuthn spec development. Please ask implementation and developer questions at either passkeys.dev/discuss or FIDO-DEV.