Re: [webauthn] UVI modification with CDDL


We can relax size constraint to 64 bytes to allow for going up to SHA-512, if the desire ts to allow for stronger hashes.  Or we can keep the byte size indeterminate.

However, the current text allows the RP to ignore UVI sizes beyond 32 ("Servers supporting UVI extensions MUST support a length of up to 32 bytes for the UVI value.")  It seems that this requirement should be removed or reworded.

GitHub Notification of comment by gmandyam
Please view or discuss this issue at using your GitHub account

Received on Thursday, 1 March 2018 19:51:14 UTC