- From: Shane Weeden via GitHub <sysbot+gh@w3.org>
- Date: Wed, 23 Oct 2024 18:40:42 +0000
- To: public-webauthn@w3.org
> What if the RP stores a snapshot of the counter of all authenticators for a user at the time a challenge is vended? That way you'd be able to compare the counter against the value at the time you requested an assertion. That's a clever remediation, but the focus of this PR is simply to describe some possible causes for counter mismatch rather than suggest how an RP should deal with it. -- GitHub Notification of comment by sbweeden Please view or discuss this issue at https://github.com/w3c/webauthn/pull/2176#issuecomment-2433145596 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Wednesday, 23 October 2024 18:40:43 UTC