[webauthn] Merged Pull Request: Note that largeBlob requires discoverable key on CTAP authenticators

emlun has just merged emlun's pull request 1622 for https://github.com/w3c/webauthn:

== Note that largeBlob requires discoverable key on CTAP authenticators ==
I did some interoperability tests with the `largeBlob` extension, and was confused because Chrome indicated "Your security key can't be used with this site" with `largeBlob: { support: "required" }` even though my security key should support it. It turned out to be because CTAP only supports the underlying extensions for discoverable keys. This is not a general requirement, but CTAP seems like an important enough class of authenticators to point this out.


<!--
    This comment and the below content is programatically generated.
    You may add a comma-separated list of anchors you'd like a
    direct link to below (e.g. #idl-serializers, #idl-sequence):

    Don't remove this comment or modify anything below this line.
    If you don't want a preview generated for this pull request,
    just replace the whole of this comment's content by "no preview"
    and remove what's below.
-->
***
<a href="https://pr-preview.s3.amazonaws.com/w3c/webauthn/pull/1622.html" title="Last updated on Aug 18, 2021, 5:13 PM UTC (4bee113)">Preview</a> | <a href="https://pr-preview.s3.amazonaws.com/w3c/webauthn/1622/ff7c715...4bee113.html" title="Last updated on Aug 18, 2021, 5:13 PM UTC (4bee113)">Diff</a>

See https://github.com/w3c/webauthn/pull/1622


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 18 August 2021 17:14:09 UTC