W3C home > Mailing lists > Public > public-webauthn@w3.org > May 2016

[webauthn] Remove attestation specification from spec

From: Alexei Czeskis via GitHub <sysbot+gh@w3.org>
Date: Fri, 13 May 2016 13:48:50 +0000
To: public-webauthn@w3.org
Message-ID: <issues.opened-154715947-1463147328-sysbot+gh@w3.org>
leshi has just created a new issue for 
https://github.com/w3c/webauthn:

== Remove attestation specification from spec ==
There seems to be growing consensus that detailed specification of 
attestation formats does not belong in this spec.

Perhaps one way is to say that all attestation statements have a 
`type` and a `value`.  Where type is an enum and `value` is a byte 
array.  Each `type` enum will specify an outside reference for how 
servers interpret `value`.  For example, for `type=android-safetynet`,
 `value` should be interpreted as per 
http://developer.android.com/training/safetynet/index.html.  The 
webauthn spec would give this mapping and that's it.

Please view or discuss this issue at 
https://github.com/w3c/webauthn/issues/108 using your GitHub account
Received on Friday, 13 May 2016 13:48:52 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:58:18 UTC