Re: [webauthn] Bit set by the SPC extension should backed up as part of the Public Key Credential Source (#2153)

Suggest altering the definition of credential source to say that extensions supplied during creation can define their own additional data, e.g.

> A credential source ([CREDENTIAL-MANAGEMENT-1]) used by an authenticator to generate authentication assertions. A public key credential source ~~consists of a struct with~~ *will contain* the following items:

and at the end

> Extensions supplied during the `authenticatorMakeCredential` operation MAY define additional data as part of the credential source.


-- 
GitHub Notification of comment by dwaite
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2153#issuecomment-2433173437 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 23 October 2024 18:52:01 UTC