Re: [webauthn] Remove attestation specification from spec

@equalsJeffH 
"As far as I understand, W3C specs can, and do, reference non-W3C 
specifications, and so having references to TPM and Android SafetyNet 
should not be an issue in and of themselves. "

I disagree with the premise that SafetyNet constitutes a 
"specification"  I think we are still ignoring that SafetyNet is not 
defined by any recognized SDO and lacks sufficient publicly-available 
information to be considered a standard.  A registry won't fix that, 
but I am not aware of any W3C specifications that reference 
proprietary formats.

In summary, I see nothing to be gained by referencing opaque, 
proprietary attestation formats that do not map to a standard.  That 
can go in a registry.

-- 
GitHub Notification of comment by gmandyam
Please view or discuss this issue at 
https://github.com/w3c/webauthn/issues/108#issuecomment-236041622 
using your GitHub account

Received on Thursday, 28 July 2016 22:15:46 UTC