Re: [webauthn] musings wrt webauthn's profile of COSE_Key

The part describing the public key format in the spec looks fine to me, although it should probably either be made clear that the map isn't sorted, or the map should be sorted correctly.

I wonder if there should be another issue about CBOR sorting in general. The CTAP2 spec sorts maps slightly differently than the CBOR RFC, and either CTAP2 sorting is used for WebAuthn CBOR too, or implementers will have to use two encoder/decoders and possibly re-sort maps when passing them through.

GitHub Notification of comment by ttaubert
Please view or discuss this issue at using your GitHub account

Received on Thursday, 7 December 2017 11:49:09 UTC