Re: [webauthn] Sign counter alg 507

Just a comment - counter value 0 is actually valid so 'null' has to be something else here, such as -1 (0xffffffff)

If we should consider changing this scheme, bit 31 (MSB) could potentially be used. If that is set, the lower 31 bits (b0..b30) do not represent a monotonic counter. The authenticator can then insert whatever it wants in the lower bits, such as a randomized nonce.

-- 
GitHub Notification of comment by jehrensvard
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/539#issuecomment-326843309 using your GitHub account

Received on Monday, 4 September 2017 00:45:08 UTC