Re: [webauthn] Credential counter must initialise as 1

This is ok in registration process since sign counter is not examined. In authentication process, the server can identify no signature counter if sign counter is 0 again and per credential signature counter if sign counter is larger than 0.

So per-credential counter doesn't have to start with 1.

-- 
GitHub Notification of comment by sangraecho
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1025#issuecomment-410970216 using your GitHub account

Received on Tuesday, 7 August 2018 08:03:44 UTC