Comment by bfulgham

That's precisely what the attestation section of the talk describes. This is all part of the WebAuthentication standard.