Re: Credentials ID - Size

On Thu, Jun 22, 2023 at 2:52 PM BalaKishore <balakishore808@gmail.com>
wrote:

> Hi All,
>
> I have a query regarding credential ID, while working with WebDevAuthn
> simulator on chrome, we found the credential-ID to be very large, almost
> 3000 to 4000 characters. Can we consider this as a valid value and process
> it?
>
> Will there be any future consideration to restrict the value of the size
> of credential-id.
>
> https://www.w3.org/TR/webauthn/#credential-id
>

Credential IDs are limited to 1023 bytes in the current draft:

https://w3c.github.io/webauthn/#credential-id
"A probabilistically-unique byte sequence identifying a public key
credential source and its authentication assertions. At most 1023 bytes
long."


Cheers

AGL