Re: [webauthn] assertionChallenge recommendations (#85)

I was curious whether we could reconsider a maximum length on the challenge to the standard.   Firefox, Chromium and Edge all have a DoS vector when the challenge is large enough https://bugs.chromium.org/p/chromium/issues/detail?id=1048002



-- 
GitHub Notification of comment by arianvp
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/85#issuecomment-604952188 using your GitHub account

Received on Friday, 27 March 2020 11:32:42 UTC