W3C home > Mailing lists > Public > public-webauthn@w3.org > July 2019

[webauthn] Merged Pull Request: Add “appidExclude” extension.

From: J.C. Jones via GitHub <sysbot+gh@w3.org>
Date: Wed, 31 Jul 2019 19:13:53 +0000
To: public-webauthn@w3.org
Message-ID: <pull_request.closed-291300448-1564600428-sysbot+gh@w3.org>
jcjones has just merged agl's pull request 1244 for https://github.com/w3c/webauthn:

== Add “appidExclude” extension. ==
This change adds a registration-only “appidExclude” extension that allows platforms to make excludeCredentials effective when transitioning from U2F.

It's a separate extension from “appid” because that extension was documented in level one as being authentication-only and some implementations thus reject it for registration. Also, having an “appid” extension that's effective during registration invites people to believe that it does the “obvious” thing and allows the creation of U2F credentials, which isn't true.

Fixes #1235.


<!--
    This comment and the below content is programatically generated.
    You may add a comma-separated list of anchors you'd like a
    direct link to below (e.g. #idl-serializers, #idl-sequence):

    Don't remove this comment or modify anything below this line.
    If you don't want a preview generated for this pull request,
    just replace the whole of this comment's content by "no preview"
    and remove what's below.
-->
***
<a href="https://pr-preview.s3.amazonaws.com/agl/webauthn/pull/1244.html" title="Last updated on Jun 27, 2019, 10:21 PM UTC (916aad6)">Preview</a> | <a href="https://pr-preview.s3.amazonaws.com/w3c/webauthn/1244/78ed130...agl:916aad6.html" title="Last updated on Jun 27, 2019, 10:21 PM UTC (916aad6)">Diff</a>

See https://github.com/w3c/webauthn/pull/1244
Received on Wednesday, 31 July 2019 19:13:54 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:59:06 UTC