Re: [webauthn] Security: Signature format doesn't cover whole context

>At **registration time** and with assertions, Bank.com would realize 
that the external authenticator saw some RPID other than Bank.com.
In this case we should add this hash(RPID) also to the packed 
attestation - same location.

-- 
GitHub Notification of comment by rlin1
Please view or discuss this issue at 
https://github.com/w3c/webauthn/issues/107#issuecomment-233012827 
using your GitHub account

Received on Friday, 15 July 2016 17:19:34 UTC