Re: [webauthn] CollectedClientData fields are not ordered correctly and crossOrigin should be required (#2101)

Yeah, I assumed the reason `crossOrigin` was not required in the IDL was backward compatibility; but the serialization algorithm requires `crossOrigin` to exist and the serialization algorithm is required to be used. This means backward compatibility was violated regardless. If I state something is optional then later state that same "something" is required, then the only way both can be true is if the "something" is required.

If backward compatibility were to have been retained, then the serialization algorithm should have been modified such that `crossOrigin` were optionally serialized; but it wasn't which means L2 was not backward compatible and now the IDL is inconsistent with the serialization algorithm making it easy for user agents to not serialize `crossOrigin` because the IDL has it as optional.

-- 
GitHub Notification of comment by zacknewman
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2101#issuecomment-2273703389 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 7 August 2024 15:09:05 UTC