Re: [webauthn] Requirements for attestation for DPK (#1799)

My understanding is that at the TPAC in 2022-9-13, we confirmed that DPK is replay-protected as DPK signs over clientDataHash in the current [PR1663](https://github.com/w3c/webauthn/pull/1663), yet it is unclear.
I suggest to close this issue after the PR is modified to make it clear. 

-- 
GitHub Notification of comment by kkoiwai
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1799#issuecomment-1244523279 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 12 September 2022 21:36:43 UTC