W3C home > Mailing lists > Public > public-webauthn@w3.org > August 2018

Re: [webauthn] Clarification of valid rpIdHash value requested in section 7 when using AppID extension

From: Emil Lundberg via GitHub <sysbot+gh@w3.org>
Date: Thu, 09 Aug 2018 10:43:04 +0000
To: public-webauthn@w3.org
Message-ID: <issue_comment.created-411715931-1533811383-sysbot+gh@w3.org>
Even if the RP doesn't remember how a particular credential was created, the RP knows that it used the `appid` extension and therefore knows that if the response doesn't match the RP ID then it must instead match the AppID (or be invalid, of course). But I agree with adding a clarification of this to the `appid` extension.

GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/980#issuecomment-411715931 using your GitHub account
Received on Thursday, 9 August 2018 10:43:06 UTC

This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 07:26:34 UTC