[webauthn] Assertion signatures with JWS? (#1581)

cyberphone has just created a new issue for https://github.com/w3c/webauthn:

== Assertion signatures with JWS? ==
Pardon my somewhat limited experience with WebAuthn and CTAP2...
Anyway, for payment assertions like https://github.com/rsolomakhin/secure-payment-confirmation/issues/40 you would probably like to use JWS.  However, FIDO2 signatures do not seem to conform to JOSE standards if I interpret this figure correctly:
https://w3c.github.io/webauthn/images/fido-signature-formats-figure2.svg

The existing JOSE stack apparently needs one or more extensions to cope with this.

Any suggestions or preferences?

Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1581 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 10 March 2021 07:54:50 UTC