Re: [webauthn] devicePubKey extension MUST be supported if multi-device WebAuthn credentials are used (#1691)

> Just extend credProps with that, and you have a signed extension that does what they want (with all the caveats of extensions already discussed)

The `credProps` extension is a client extension not an authenticator extension. Client extensions are not signed (and authenticator extensions are only signed on creation if you have attestations.)

> And while we're at it, flags for platform/roaming would be nice.

I believe you can accomplish this by checking getTransports() for `internal`. We will eventually/hopefully have authenticators which are both platform and capable of roaming  (e.g. a phone used as an authenticator for other clients over a wire/network/proximity protocol in addition to having integrated platform support)

-- 
GitHub Notification of comment by dwaite
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1691#issuecomment-1020684195 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 25 January 2022 00:24:32 UTC