w3c / webauthn

Web Authentication: An API for accessing Public Key Credentials
https://w3c.github.io/webauthn/
Other
1.16k stars 166 forks source link

No description regarding representation of credential Id length #570

Closed Kieun closed 6 years ago

Kieun commented 7 years ago

In section 5.3.1, there is lack of explanation regarding representation of credential Id length. Referring to CTAP spec, the length should be 2-byte unsigned big-endian integer. See followings Attestation Data

AngeloKai commented 6 years ago

Good catch! Thank you! We should clarify this before going to CR.

@equalsJeffH @nadalin @YubicoDemo for tracking.

nadalin commented 6 years ago

@selfissued Reference CTAP specification for length