Re: [webauthn] Bad instructions in Android SafetyNet attestation validation steps

I'll concede fair point on the location of the document to review. I won't quite concede on the "non-issue" statement. 

The output of a sha256 operation is a byte array. The nonce in the jws payload of the response is a base64 encoded representation of this.

-- 
GitHub Notification of comment by sbweeden
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1018#issuecomment-409253535 using your GitHub account

Received on Tuesday, 31 July 2018 15:03:00 UTC