W3C home > Mailing lists > Public > public-webauthn@w3.org > August 2022

[webauthn] new commits pushed by agl

From: Adam Langley via GitHub <sysbot+gh@w3.org>
Date: Thu, 25 Aug 2022 22:40:39 +0000
To: public-webauthn@w3.org
Message-ID: <push-ece61f0870936697d3b78427191e73598c147a3d-1661467237-sysbot+gh@w3.org>

The following commits were just pushed by agl to https://github.com/w3c/webauthn:

* Hopefully fix up my misinterpretation of emlun's comment.
  by Adam Langley
https://github.com/w3c/webauthn/commit/3430c953e47ab35085e80ac0086623f443de2f8e

* RPs shouldn't check DPK attestation for equality.

Otherwise they'll consider fresh attestations to be different devices.
The attestation for existing DPKs is already checked in the “exactly one
match” case.
  by Adam Langley
https://github.com/w3c/webauthn/commit/5af393d40ff4275a343cb7b7cec19ac6876045be

* Remove incorrect note about nonces.

Just because the attestation is changing doesn't mean that the
authenticator is using a nonce. It could just be signing the same
message repeatedly.
  by Adam Langley
https://github.com/w3c/webauthn/commit/fe333fe13b5a6b16a8012a49b680adf4a30e056a

* Include enterpriseAttestationPossible when calling authenticatorGetAssertion
  by Adam Langley
https://github.com/w3c/webauthn/commit/ece61f0870936697d3b78427191e73598c147a3d



-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Thursday, 25 August 2022 22:40:40 UTC

This archive was generated by hypermail 2.4.0 : Thursday, 25 August 2022 22:40:41 UTC