[webauthn] new commits pushed by agl

The following commits were just pushed by agl to https://github.com/w3c/webauthn:

* Hopefully fix up my misinterpretation of emlun's comment.
  by Adam Langley
https://github.com/w3c/webauthn/commit/3430c953e47ab35085e80ac0086623f443de2f8e

* RPs shouldn't check DPK attestation for equality.

Otherwise they'll consider fresh attestations to be different devices.
The attestation for existing DPKs is already checked in the “exactly one
match” case.
  by Adam Langley
https://github.com/w3c/webauthn/commit/5af393d40ff4275a343cb7b7cec19ac6876045be

* Remove incorrect note about nonces.

Just because the attestation is changing doesn't mean that the
authenticator is using a nonce. It could just be signing the same
message repeatedly.
  by Adam Langley
https://github.com/w3c/webauthn/commit/fe333fe13b5a6b16a8012a49b680adf4a30e056a

* Include enterpriseAttestationPossible when calling authenticatorGetAssertion
  by Adam Langley
https://github.com/w3c/webauthn/commit/ece61f0870936697d3b78427191e73598c147a3d



-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Thursday, 25 August 2022 22:40:40 UTC