As I went through Fido specifications:
the server (providing web app/services) need to trust user agent for local fido authentication and if needed can enforce certain policies"
I am not sure what that translates into.
How is the trust established? Aren't there any side effects that now authentication is performed locally at user rather at server side traditionally?