[webauthn] Pull Request: [Meta] Hard-code HKDF in PRF importCryptoKey

emlun has just submitted a new pull request for https://github.com/w3c/webauthn:

== [Meta] Hard-code HKDF in PRF importCryptoKey ==
This would merge into PR #1945.

I'm not sure it's wise to have all that flexibility in the PRF `importKey` invocation. Maybe it's better to hard-code importing an unexportable HKDF key instead; this can in turn be used to derive other keys.

See https://github.com/w3c/webauthn/pull/1946


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 23 August 2023 14:11:50 UTC