-
`authData` in attestation and `authenticatorData` in the assertion represent the same interface but are named differently. Is there a reason for this asymmetry? Would it be possible to make them both …
-
Do you know if there's a soft token library available that would be suitable to use for testing?
At the moment I use webdriverio and Firefox, which is fine but requires me to have a hard token plug…
-
Both the attachment parameter and the verification-gesture parameter requires the client to query the authenticator for capabilities prior to the official makeCredential and getAssertion call. Should …
-
clarify "authenticator model": RPs may perform feature-based authenticator selection with both
1. [`navigator.credentials.create()`](https://w3c.github.io/webappsec-credential-management/#dom-creden…
-
We may wish to add to the authenticatorCancel operation description some considerations for rolling back state (counters, keys, etc.)
-
[CTAP](https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-client-to-authenticator-protocol-v2.0-id-20180227.html#authenticatorMakeCredential) allows that authenticators can use a data URL for t…
-
We are working to convert a repository of STIX 1 data to STIX 2 and plan to use the stix2elevator project. We have encountered an issue with some objects using ‘idref’ for objects that are outside of…
-
> An authenticator must maintain isolation between sessions. It may do this by only allowing one session to exist at any particular time, or by providing more complicated session management.
This …
-
The current [CTAP][ctap] draft no longer has the `up` option in [authenticatorMakeCredential][ctap-amc], and [authenticatorGetAssertion][ctap-aga] now clearly specifies when to collect user consent an…
emlun updated
6 years ago
-
Step 4 of the [U2F attestation verification procedure](https://w3c.github.io/webauthn/#fido-u2f-attestation) could use some clarification:
> Convert the COSE_KEY formatted credentialPublicKey (see …