Re: [webauthn] Clarification on CBOR-encoding of COSE keys (#2054)

Funny you should mention that, there was some issues back in August with Firefox returning `"OKP"` for `kty` instead of `1` - it broke some libraries (like the ones I maintain) that weren't expecting to get a string. @emlun [noted here](https://github.com/duo-labs/py_webauthn/issues/160#issuecomment-1679113276) that:

> As far as I can tell, all actual values in the [COSE registry](https://www.iana.org/assignments/cose/cose.xhtml#key-type) (the "Value" and "Label" columns) seem to be integer typed.

So in practice there's something to point and say, "`kty` should only be `int` around here". But as you note there's currently nothing in the spec that explicitly forbids use of `tstr` 🤔 

-- 
GitHub Notification of comment by MasterKale
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2054#issuecomment-2026216470 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Thursday, 28 March 2024 22:06:30 UTC