Re: [webauthn] Key types and algorithms are confusing

I agree in general, however limiting a key to a particular signature alg is a goo thing in theory as it protects against some theoretical attacks against the private key.   The current wording however is probably not the best way to make that clear.

-- 
GitHub Notification of comment by ve7jtb
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/547#issuecomment-328160815 using your GitHub account

Received on Friday, 8 September 2017 17:07:36 UTC