[webauthn] Merged Pull Request: Make largeBlobs explicit during create.

agl has just merged agl's pull request 1470 for https://github.com/w3c/webauthn:

== Make largeBlobs explicit during create. ==
Once largeBlobKey (at CTAP2) became something that the authenticator
could derive I had hoped that we could simplify the WebAuthn level
extension and not have a creation extension. Instead, user agents could
just always create a largeBlobKey in contexts where the extension could
be used.

However 100% (i.e. both) people who have looked at this now though that
was non-obvious and so it's probably Too Cute and should be More
Explicit. Also, it's been suggested that it would be a waste of a
resident credential if the RP needed to store a blob and only found out
after at assertion time that it wouldn't work.


<!--
    This comment and the below content is programatically generated.
    You may add a comma-separated list of anchors you'd like a
    direct link to below (e.g. #idl-serializers, #idl-sequence):

    Don't remove this comment or modify anything below this line.
    If you don't want a preview generated for this pull request,
    just replace the whole of this comment's content by "no preview"
    and remove what's below.
-->
***
<a href="https://pr-preview.s3.amazonaws.com/agl/webauthn/pull/1470.html" title="Last updated on Sep 28, 2020, 9:01 PM UTC (5a7f641)">Preview</a> | <a href="https://pr-preview.s3.amazonaws.com/w3c/webauthn/1470/faa8de8...agl:5a7f641.html" title="Last updated on Sep 28, 2020, 9:01 PM UTC (5a7f641)">Diff</a>

See https://github.com/w3c/webauthn/pull/1470


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 30 September 2020 19:59:16 UTC