[webauthn] Merged Pull Request: device public key extension

agl has just merged equalsJeffH's pull request 1663 for https://github.com/w3c/webauthn:

== device public key extension ==
The resolves #1658 by defining the `devicePubKey` extension et al.  It is admittedly rough and will need further work, thus am casting it as a "draft" PR.

update 4-Mar-2022: @ve7jtb has submitted issue https://github.com/w3c/webauthn/issues/1701 --- this PR needs to be updated to address it.

update 19-Mar-2022:  commit f0fe8f2 is a rough start at adding an authenticator-generated nonce to `attObjForDevicePublicKey`: fixes #1701 

update 23-Mar-2022:  there's now commits beyond f0fe8f2 attempting to further refine the RP usage and extension output verification procedures. Though, see also issue #1711 and https://github.com/w3c/webauthn/pull/1663#issuecomment-1077868106: **issue #1711 really needs to be addressed** as a part of the `devicePubKey` effort.


<!--
    This comment and the below content is programmatically generated.
    You may add a comma-separated list of anchors you'd like a
    direct link to below (e.g. #idl-serializers, #idl-sequence):

    Don't remove this comment or modify anything below this line.
    If you don't want a preview generated for this pull request,
    just replace the whole of this comment's content by "no preview"
    and remove what's below.
-->
***
<a href="https://pr-preview.s3.amazonaws.com/w3c/webauthn/pull/1663.html" title="Last updated on Oct 7, 2022, 7:34 PM UTC (6ae32a0)">Preview</a> | <a href="https://pr-preview.s3.amazonaws.com/w3c/webauthn/1663/8a6daec...6ae32a0.html" title="Last updated on Oct 7, 2022, 7:34 PM UTC (6ae32a0)">Diff</a>

See https://github.com/w3c/webauthn/pull/1663


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Friday, 7 October 2022 20:05:29 UTC