Re: [webauthn] Fix Android attestation

Since the parameter for setAttestationChallenge is changed from the concatenation of authenticatorData and clientDataHash to clientDataHash only, the verification procedure should be modified as well.
> The value of the attestationChallenge field is identical to the concatenation of authenticatorData and clientDataHash.

In stead,
> The value of the attestationChallenge field is identical to clientDataHash.

@christiaanbrand would you change the verification procedures?


-- 
GitHub Notification of comment by Kieun
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/546#issuecomment-331060502 using your GitHub account

Received on Thursday, 21 September 2017 06:07:36 UTC