W3C home > Mailing lists > Public > public-webauthn@w3.org > November 2017

[webauthn] Recommend RPs to verify UP and UV flags

From: Emil Lundberg via GitHub <sysbot+gh@w3.org>
Date: Fri, 03 Nov 2017 09:29:57 +0000
To: public-webauthn@w3.org
Message-ID: <issues.opened-270918588-1509701393-sysbot+gh@w3.org>
emlun has just created a new issue for https://github.com/w3c/webauthn:

== Recommend RPs to verify UP and UV flags ==
Neither of [§7.1. Registering a new credential][reg] and [§7.2. Verifying an authentication assertion][ass] currently says anything about the `UP` and `UV` flags in the authenticator data. We should recommend the RP to verify that these flags have the expected values.

See also #629.

[reg]: https://w3c.github.io/webauthn/#registering-a-new-credential
[ass]: https://w3c.github.io/webauthn/#verifying-assertion

Please view or discuss this issue at https://github.com/w3c/webauthn/issues/668 using your GitHub account
Received on Friday, 3 November 2017 09:29:59 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:58:43 UTC