Review of PR #409: Add User Verification (UV) bit to authenticator data from =JeffH on 2017-04-23 (public-webauthn@w3.org from April 2017)

From: =JeffH <Jeff.Hodges@KingsMountain.com>
Date: Sat, 22 Apr 2017 18:37:51 -0700
To: W3C Web Authn WG <public-webauthn@w3.org>
Message-ID: <99bcf1c2-eb01-de07-a701-3ad34292b8a0@KingsMountain.com>

Review of PR #409: Add User Verification (UV) bit to authenticator data
<https://github.com/w3c/webauthn/pull/409#pullrequestreview-34169057>

This PR is overall OK given that it constitutes a signed attestation 
that user verification occurred or did not. It harmonizes with the 
existing TUP bit (which I suggest we rename UP - 'user present', fwiw)

Further comments in the review.

HTH,

=JeffH

Received on Sunday, 23 April 2017 01:38:14 UTC