Re: [webauthn] Dependencies on CTAP2 canonical CBOR encoding form? (#1624)

The CTAP specification does not follow the base deterministic encoding rules; specifically, there is not an attempt to minimize the size of floating point numbers (a MUST in RFC 8949 4.2.1). I believe the other rules match - taking into account the CTAP spec and known extensions do not use tags or map/array values as map keys.

It is possible that the existing encoding rules could be translated to be based on ยง4.2.1 with caveats, but it would still be another encoding - implemented in shipping hardware and cryptographically signed to prevent cleanup for consistency.

-- 
GitHub Notification of comment by dwaite
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1624#issuecomment-862672788 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 16 June 2021 19:59:40 UTC