1) yes 2) yes, as specified in WebAuthn.
Fill in the blank.