Re: [webauthn] Clarify authenticator behaviour when not implementing signature counter

Just to be clear, authenticator which supports signature counter can also set signature counter to zero. For an authenticator which supports per credential based signature counter, (Like windows hello/ some external authenticators already in the wild), this counter signifies how many signatures were performed by that newly created credential which is zero at the time of credential creation. 

Whether authenticator actually supports signature counter or not is known at getAssertion time. 



-- 
GitHub Notification of comment by akshayku
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1008#issuecomment-407814520 using your GitHub account

Received on Wednesday, 25 July 2018 16:25:52 UTC