W3C home > Mailing lists > Public > public-webauthn@w3.org > March 2018

[webauthn] Pull Request: Emphasise that the CollectedClientData can be extended.

From: Adam Langley via GitHub <sysbot+gh@w3.org>
Date: Fri, 02 Mar 2018 01:43:42 +0000
To: public-webauthn@w3.org
Message-ID: <pull_request.opened-172402113-1519955021-sysbot+gh@w3.org>
agl has just submitted a new pull request for https://github.com/w3c/webauthn:

== Emphasise that the CollectedClientData can be extended. ==
There is a risk that RPs will implement overly simplistic parsing of the `CollectedClientData` and end up intolerant of any future additions. This change emphasises the need to parse it properly and will be coupled with a behaviour in Chrome that inserts a key (`new_keys_may_be_added_here`) in a random 20% of cases.

See https://github.com/w3c/webauthn/pull/827
Received on Friday, 2 March 2018 01:43:45 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:58:47 UTC