Re: [webauthn] UAs can't pass unknown extensions to authenticators

We should say that explicitly, with tweaks since we're starting from JS objects instead of serialized JSON. Consider starting from a copy of https://tc39.github.io/ecma262/#sec-json.stringify to make sure we handle all cases.

We should probably also ban individual extensions from defining their own conversion-to-CBOR rules to avoid the need for authenticators to parse two formats.

-- 
GitHub Notification of comment by jyasskin
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/738#issuecomment-356448720 using your GitHub account

Received on Tuesday, 9 January 2018 23:31:35 UTC