[webauthn] Issue: Remove attestation specification from spec marked as type:technical

leshi has just labeled an issue for https://github.com/w3c/webauthn as
 "type:technical":

== Remove attestation specification from spec ==
There seems to be growing consensus that detailed specification of 
attestation formats does not belong in this spec.

Perhaps one way is to say that all attestation statements have a 
`type` and a `value`.  Where type is an enum and `value` is a byte 
array.  Each `type` enum will specify an outside reference for how 
servers interpret `value`.  For example, for `type=android-safetynet`,
 `value` should be interpreted as per 
http://developer.android.com/training/safetynet/index.html.  The 
webauthn spec would give this mapping and that's it.

See https://github.com/w3c/webauthn/issues/108

Received on Friday, 13 May 2016 13:49:15 UTC