Re: [webauthn] §6.1. Steps to generate authenticator data should include BE and BS flags (#2064)

It is correct that authenticators SHALL set the RFU bits to zero, but as discussed in https://github.com/w3c/webauthn/issues/2063#issuecomment-2085263218, RPs should not enforce this as that would break those RPs if these bits are allocated in the future (unless the RP _wants_ that breakage to happen, of course).

-- 
GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2064#issuecomment-2133766496 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 27 May 2024 16:00:36 UTC