Mmm... I can't think of many reasons why anyone would ever want to decrease the length of a challenge. It does seem like it might be short-sighted to declare 16 good, 15 bad in a long-lived spec. However for interop, I'd hate if Firefox required 32 bytes but Chrome was okay with only 4.... This is not straightforward. -- GitHub Notification of comment by jcjones Please view or discuss this issue at https://github.com/w3c/webauthn/pull/859#issuecomment-378669091 using your GitHub accountReceived on Wednesday, 4 April 2018 16:50:45 UTC
This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 07:26:32 UTC