Re: [webauthn] Client-generated challenges

@emlun yes that's the use case, you described it much better than I did - apologies for that.

@arnar I didn't fully grok what gets signed. As you say, that means the signature won't pass standard JWT verification and I don't want to invent a new one.

Thanks to you both for clarifying things, appreciate it.

-- 
GitHub Notification of comment by davedoesdev
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/902#issuecomment-388266080 using your GitHub account

Received on Friday, 11 May 2018 05:45:33 UTC