Re: [webauthn] Does AuthenticationExtensionsClientOutputs key have to be extension identifier or not? (#1430)

On a related note, [ยง9.2 Defining Extensions]( says:

>Any client extension that is processed by the client MUST return a client extension output value so that the WebAuthn Relying Party knows that the extension was honored by the client.

...which is currently not obeyed by the [`appidExclude` extension]( We should either relax this restriction or add an extension output to `appidExclude`. @agl Thoughs?

GitHub Notification of comment by emlun
Please view or discuss this issue at using your GitHub account

Received on Thursday, 11 June 2020 00:01:57 UTC