Re: [webauthn] Sign counter alg 507

Counter is admittedly ambiguous on if it is a signed or unsigned integer.  For the simple use as a authentication counter having it wrap into negative numbers is probably not something anyone has seen:)

We could say if the MSB is ff then counter is not supported.   That allows the receiving implementation to decide if they are treating it as signed or unsigned and do the correct thing.

Rather than trying to specify it as a decimal value.

-- 
GitHub Notification of comment by ve7jtb
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/539#issuecomment-328167277 using your GitHub account

Received on Friday, 8 September 2017 17:35:24 UTC