Re: [webauthn] Attestation type identifiers lack formal definition and matching rules

Saying the identifiers are allocated implies, to me, a registry. 
Current language is that _identifiers should aim to be globally 
unique_. It seems to me we could give your formal definition and 
matching rules, drop the note about allocation, and instead have 
something like:

> Extensions are identified by a string, chosen by the extension 
author.  They MUST
not be longer than 32 octets and MUST consist only of 
printable USASCII characters, i.e., VCHAR as defined 
in [RFC5234]. Implementations MUST match WebAuthn 
attestation type identifiers in a case-insensitive fashion.

> Extension identifiers should aim to be globally unique,
e.g., by using reverse domain-name of the defining entity such as 
`com.example.webauthn.myextension`.

-- 
GitHub Notification of comment by jcjones
Please view or discuss this issue at 
https://github.com/w3c/webauthn/issues/127#issuecomment-231878657 
using your GitHub account

Received on Monday, 11 July 2016 21:59:15 UTC