Re: [webauthn] Decoding attestationObject (#1614)

AFAICT, there is a non-CBOR prefix followed by a public key in COSE format, then followed by an optional extension in CBOR format.  This is, after removing the non-CBOR prefix, you need a CBOR parser that do not parse a single object, but potentially multiple objects.  I doubt that there are many (any?) CBOR parsers out there that can do that.  Arrays were designed to cope with such constructs.  

Anyway, nobody seems to be using the extension field so maybe I just raised a zero issue.

-- 
GitHub Notification of comment by cyberphone
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1614#issuecomment-853324077 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 2 June 2021 19:25:31 UTC