Re: [webauthn] explain challenge's security importance and use in both registration and authentication operations

> The challenge was originally a base64 encoded DOMString. We changed it to BufferSource in response to TAG feedback. See #61.

thanks @vijaybh -- this seems to be a lesson that we now have long enough history that we ought to search prior issues/PRs rather than rely on memory (as I mistakenly did)...

-- 
GitHub Notification of comment by equalsJeffH
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/404#issuecomment-295333768 using your GitHub account

Received on Wednesday, 19 April 2017 16:30:36 UTC