Re: [webauthn] JSON deserialization is not defined

It's worth noting that the occurrences @annevk mentions are in the RP operations and act on the _serialized client data_, which is explicitly a `CollectedClientData` (whose fields are all JSON serializable) serialized to JSON, so I think it should be fine to talk about JSON there as it'll not necessarily run in a browser.

The changes in #718 do solve this, I think, but instead have the issue that they refer to browser APIs, which might be confusing since these are RP operations and not client operations.

-- 
GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/713#issuecomment-362045174 using your GitHub account

Received on Wednesday, 31 January 2018 19:35:16 UTC