- From: J.C. Jones via GitHub <sysbot+gh@w3.org>
- Date: Wed, 31 Jul 2019 19:13:53 +0000
- To: public-webauthn@w3.org
jcjones has just merged agl's pull request 1244 for https://github.com/w3c/webauthn:
== Add “appidExclude” extension. ==
This change adds a registration-only “appidExclude” extension that allows platforms to make excludeCredentials effective when transitioning from U2F.
It's a separate extension from “appid” because that extension was documented in level one as being authentication-only and some implementations thus reject it for registration. Also, having an “appid” extension that's effective during registration invites people to believe that it does the “obvious” thing and allows the creation of U2F credentials, which isn't true.
Fixes #1235.
<!--
This comment and the below content is programatically generated.
You may add a comma-separated list of anchors you'd like a
direct link to below (e.g. #idl-serializers, #idl-sequence):
Don't remove this comment or modify anything below this line.
If you don't want a preview generated for this pull request,
just replace the whole of this comment's content by "no preview"
and remove what's below.
-->
***
<a href="https://pr-preview.s3.amazonaws.com/agl/webauthn/pull/1244.html" title="Last updated on Jun 27, 2019, 10:21 PM UTC (916aad6)">Preview</a> | <a href="https://pr-preview.s3.amazonaws.com/w3c/webauthn/1244/78ed130...agl:916aad6.html" title="Last updated on Jun 27, 2019, 10:21 PM UTC (916aad6)">Diff</a>
See https://github.com/w3c/webauthn/pull/1244
Received on Wednesday, 31 July 2019 19:13:54 UTC