Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague

In cases of UAF, the credential Id (called keyId) is unique in the scope of aaguid (called AAID). We cannot guarantee that the credential Ids are unique across all authenticators. For usability, the server may check duplication of credential Ids in the scope aaguid instead of looking up all records.

-- 
GitHub Notification of comment by Kieun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/579#issuecomment-331756106 using your GitHub account

Received on Monday, 25 September 2017 01:35:02 UTC