[webauthn] new commits pushed by agl

The following commits were just pushed by agl to https://github.com/w3c/webauthn:

* Truncate strings for authenticators where needed.

There exist a significant number of authenticators that do not conform
to the current WebAuthn requirements in that they fail requests with
name/displayName strings longer than 64 bytes, rather than truncating
them.

This change adds a new requirement on user-agents that they maintain the
authenticator model for RPs by doing the truncation on their behalf in
this case. The alternative is that each RP will hit this edge-case and
do the truncation itself, thus the ecosystem will never be able to
support longer strings.

Since user-agents may now be doing truncation, this change also permits
truncation at the level of grapheme clusters (since user-agents
presumably have Unicode tables available).

Fixes #1296.
  by Adam Langley
https://github.com/w3c/webauthn/commit/c7406dde0eacd1b8b6d2698a89dd324377f52409

* Address Jeff and Emil's comments.
  by Adam Langley
https://github.com/w3c/webauthn/commit/e75a6f067b25d69d8931f1a76b855685f95187ca

* Create a way to reference the following figure.

The fact that we have to keep the figure numbers in sync manually
annoyed me. Bikeshed isn't helping out here so I don't see a way to
avoid this for long-range links, but this change eliminates the need to
manually maintain some of the absolute numbers by providing a way to
insert the number of the following figure when the reference and figure
are close by.
  by Adam Langley
https://github.com/w3c/webauthn/commit/3f1f35a154d953850998ba21c5e1a0abbc96f1a8

Received on Thursday, 17 October 2019 21:09:20 UTC