- From: GitHub <noreply@github.com>
- Date: Mon, 05 Feb 2018 16:34:14 -0800
- To: public-webauthn@w3.org
- Message-ID: <5a78f806f313c_74c52ab9d8679c08523bc@hookshot-fe-d2afb11.cp1-iad.github.net.mail>
Branch: refs/heads/master Home: https://github.com/w3c/webauthn Commit: 4f1a3ba8339824dc0491274393bebe3c142676f6 https://github.com/w3c/webauthn/commit/4f1a3ba8339824dc0491274393bebe3c142676f6 Author: Jeffrey Yasskin <jyasskin@gmail.com> Date: 2018-02-05 (Mon, 05 Feb 2018) Changed paths: M index.bs Log Message: ----------- Describe how authenticators unique and find credential sources. (#623) * Define Public Key Credential Source and Credential ID. This also redefines "Public Key Credential" to be the thing presented to the RP, as a willful violation of RFC4949. Credential ID is defined to explicitly include the possibility that it's the encrypted Credential Source. * Link "credential ID". * Allow hashes as credential IDs. * Describe how authenticators unique and find credential sources. This happens to fix a maybe-bug where the authenticator didn't check that a decrypted credential ID came from the right RP. It's also much more precise about the distinction between a credential descriptor and a credential or credential source. * finish merge-from-master and fixup dangling internal crossrefs * restore masthead * restore clientDataHash rather than tbsHash in U2F attstn format * fixing rendering issue * fixup merge-from-master loose ends by hand * fix var ignore issue * address emlun's comments, thx! * catch straggler from emlun's comments, mea culpa * ignore a var make bikeshed happier * move op-lookup-credsource-by-credid alg to new subsection * dont need ignore no more
Received on Tuesday, 6 February 2018 00:35:14 UTC