Re: [webauthn] daaKey format? (ECPointToB -> ECPoint2ToB)

I think we have two options here
a) directly encoding the full ECDAA Issuer public key here, in this case it would be ECPoint2ToB result or
b) use the c value of the public key (as defined in section 3.3 step 3.5) in which case it would be the result of BigNumberToB.

using b) is shorter (less bytes) and avoids accidentally "forgetting" to verify the ECDAA Issuer public key to the trust store.  So I prefer option b at this time - other opinions welcome.

-- 
GitHub Notification of comment by rlin1
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/385#issuecomment-288047116 using your GitHub account

Received on Tuesday, 21 March 2017 11:11:55 UTC