[webauthn] Pull Request: Replace in-field string metadata with resource-level default fields

emlun has just submitted a new pull request for https://github.com/w3c/webauthn:

== Replace in-field string metadata with resource-level default fields ==
This addresses #1643:

> We request that you do the following:
> 
> * Remove the in-field encoding of language metadata using Unicode tag characters
> * Remove the in-field encoding of string direction using strongly directional marks
> * Add a document-level field for the document language and a document-level field for default direction; such fields would be optional, since you have an installed base

New `language` and `direction` attributes on `PublicKeyCredentialUserEntity` seems like the most appropriate implementation of a "document-level field", since these are the only natural language string parameters we have. The new attributes won't work with currently existing CTAP authenticators, but their processing is specified as "best-effort" (at least that's the intent) so RPs should be aware that they might not work.

---

The following tasks have been completed:

- [ ] Modified Web platform tests ([link](https://github.com/web-platform-tests/wpt/))

Implementation commitment:

- [ ] WebKit ([link to issue](https://bugs.webkit.org/))
- [ ] Chromium ([link to issue](https://issues.chromium.org/issues/new?component=1456855&template=0))
- [ ] Gecko ([link to issue](https://bugzilla.mozilla.org/home))

Documentation and checks

- N/A ~~Affects privacy~~
- N/A ~~Affects security~~
- N/A ~~Updated explainer~~


See https://github.com/w3c/webauthn/pull/2280


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 9 April 2025 16:03:39 UTC