Re: U2F to WebAuthn (as of Vijay's PR) from Alexei Czeskis on 2017-02-13 (public-webauthn@w3.org from February 2017)

From: Alexei Czeskis <aczeskis@google.com>
Date: Mon, 13 Feb 2017 10:51:44 -0800
To: W3C Web Authn WG <public-webauthn@w3.org>, Jakob Ehrensvärd <jakob@yubico.com>, Dirk Balfanz <balfanz@google.com>, Kimberly Paulhamus <kpaulhamus@google.com>, Richard Barnes <rbarnes@mozilla.com>, Vijay Bharadwaj <vijaybh@microsoft.com>
Message-ID: <CAM_SUqdJBNTX2T6TE-mP-vh0Am_nnppwp=RY4UPsc8eGdr+hUA@mail.gmail.com>

Notably missing is the value we'd give to counter.  Maybe we just pick 0?
The U2F spec monotonically increasing, so if we set it to 0, that should be
fine for all U2F authenticators... I think...

Thanks!
-Alexei

*____**_**__**_**_**_**_**_**_**_**_**_*

 . Alexei Czeskis .:. Securineer .:. 317.698.4740 .

On Mon, Feb 13, 2017 at 10:49 AM, Alexei Czeskis <aczeskis@google.com>
wrote:

> Here is a sketch of how the browser would shoehorn the current U2F
> response into the WebAuthn attestation object proposed by Vijay in PR 321.
>
> Thanks!
> -Alexei
>
> *____**_**__**_**_**_**_**_**_**_**_**_*
>
>  . Alexei Czeskis .:. Securineer .:. 317.698.4740 <(317)%20698-4740> .
>

Received on Monday, 13 February 2017 18:52:32 UTC