- From: =JeffH via GitHub <sysbot+gh@w3.org>
- Date: Tue, 06 Feb 2018 00:34:15 +0000
- To: public-webauthn@w3.org
equalsJeffH has just merged jyasskin's pull request 623 for https://github.com/w3c/webauthn:
== Describe how authenticators unique and find credential sources. ==
This PR builds on #620. Just look at the last commit (50d8d1b) to see what's new here. @leshi, @rlin1, @akshayku, you were cc'ed on https://github.com/w3c/webauthn/pull/602#discussion_r142500439, which this patch implements.
This happens to fix a maybe-bug where the authenticator didn't check that a
decrypted credential ID came from the right RP.
It's also much more precise about the distinction between a credential
descriptor and a credential or credential source.
This still only improves #578, but it makes it clearer where we'll put that fix.
<!--
This comment and the below content is programatically generated.
You may add a comma-separated list of anchors you'd like a
direct link to below (e.g. #idl-serializers, #idl-sequence):
#authenticator-credentials-map, #op-make-cred, #op-get-assertion
Don't remove this comment or modify anything below this line.
If you don't want a preview generated for this pull request,
just replace the whole of this comment's content by "no preview"
and remove what's below.
-->
***
<a href="https://pr-preview.s3.amazonaws.com/jyasskin/webauthn/pull/623.html" title="Last updated on Feb 2, 2018, 3:30 PM GMT (14335b1)">Preview</a> (<a href="https://pr-preview.s3.amazonaws.com/jyasskin/webauthn/pull/623.html#authenticator-credentials-map" title="#authenticator-credentials-map">#authenticato…</a>) (<a href="https://pr-preview.s3.amazonaws.com/jyasskin/webauthn/pull/623.html#op-make-cred" title="#op-make-cred">#op-make-cred</a>) (<a href="https://pr-preview.s3.amazonaws.com/jyasskin/webauthn/pull/623.html#op-get-assertion" title="#op-get-assertion">#op-get-asser…</a>) | <a href="https://pr-preview.s3.amazonaws.com/w3c/webauthn/623/1fc8906...jyasskin:14335b1.html" title="Last updated on Feb 2, 2018, 3:30 PM GMT (14335b1)">Diff</a>
See https://github.com/w3c/webauthn/pull/623
Received on Tuesday, 6 February 2018 00:34:18 UTC