From 6d153a6a60682ec2b010192b8d3f5ad1443353c8 Mon Sep 17 00:00:00 2001 From: Tim Cappalli Date: Mon, 13 Jan 2025 17:00:21 -0500 Subject: [PATCH 1/3] fix bikeshed issues --- index.bs | 23 +++++++---------------- 1 file changed, 7 insertions(+), 16 deletions(-) diff --git a/index.bs b/index.bs index 40a4ab6e8..fae35d0d0 100644 --- a/index.bs +++ b/index.bs @@ -128,16 +128,6 @@ figure.table .overlarge { } - -
-
-spec: dom; type: interface; for:/; text: Document
-
-
-
- - - 
 
@@ -304,6 +294,7 @@ spec: BCP47; urlPrefix: https://tools.ietf.org/html/bcp47
 
 
 spec:credential-management; type:dfn; text:credentials
+spec:dom; type:dfn; for:/; text:document
 spec:html; type:dfn; for:environment settings object; text:global object
 spec:html; type:dfn; for:/; text:same site
 spec:infra; type:dfn; for:/; text:set
@@ -1472,7 +1463,7 @@ browser to create a new credential for future use by the [=[RP]=]. See 
-    
+    
     
Registration Flow

 
 
@@ -1482,7 +1473,7 @@ Scripts can also request the user’s permission to perform
 
 
 

-    
+    
     
Authentication Flow

 

 
@@ -4799,7 +4790,7 @@ the requested [=public key credential|credential=] is [=scoped=] to exactly matc
 Figure  shows a visual representation of the [=authenticator data=] structure.
 
 

-    
+    
     
[=Authenticator data=] layout.

 

 
@@ -5389,7 +5380,7 @@ a numbered step. If outdented, it (today) is rendered as a bullet in the midst o
     client data=] (which potentially has a variable length) is always the last element.
 
     

-        
+        
         
Generating an [=assertion signature=].

     

 
@@ -5501,7 +5492,7 @@ Since that leaves a partial UTF-8 code point, the remainder of that code point m
 Since that leaves a partial [=grapheme cluster=], the remainder of that cluster should also be removed.
 
 

-    
+    
     
The end of a UTF-8 encoded string showing the positions of different truncation boundaries.

 

 
@@ -5582,7 +5573,7 @@ for the [=[RP]=] to base a trust decision on.
 In these cases, the [=authenticator=] provides no guarantees about its operation to the [=[RP]=].
 
 

-    
+    
     
[=Attestation object=] layout illustrating the included [=authenticator data=] (containing [=attested credential
     data=]) and the [=attestation statement=].

 


From 210109d6953de00472b9fdb0867897b1b628cf26 Mon Sep 17 00:00:00 2001
From: Tim Cappalli 
Date: Tue, 14 Jan 2025 08:54:06 -0500
Subject: [PATCH 2/3] optimize SVGs

---
 images/fido-attestation-structures.svg     |  924 +++---------------
 images/fido-signature-formats-figure1.svg  |  559 ++---------
 images/fido-signature-formats-figure2.svg  |  329 +------
 images/string-truncation.svg               |  353 +------
 images/webauthn-authentication-flow-01.svg |  971 +++----------------
 images/webauthn-registration-flow-01.svg   | 1009 +++-----------------
 6 files changed, 529 insertions(+), 3616 deletions(-)

diff --git a/images/fido-attestation-structures.svg b/images/fido-attestation-structures.svg
index 3f61352d5..cbe44f395 100644
--- a/images/fido-attestation-structures.svg
+++ b/images/fido-attestation-structures.svg
@@ -1,795 +1,129 @@
-
-image/svg+xml
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-ATTESTATION OBJECT
-
-
-
-“authData“:   ...
-“fmt“:   “packed““attStmt“:   ...
-
-
-
-
-
-
-variable length if present (CBOR)AUTHENTICATOR DATA
-AAGUID 
-LCREDENTIAL ID
-CREDENTIAL PUBLIC KEY
-variable length (COSE_Key)L bytes(variable length)2 bytes16 bytesRP ID HASHFLAGSCOUNTERATTESTED CRED. DATAEXTENSIONS32 bytes1 byte4 bytes (big-endian uint32)variable length UVUP07EDAT0BSBE0
-Rechteck.3“sig“: ...“sig“:   ...
-
-Rechteck.5“alg“: ...“alg“:   ...
-
-Rechteck.6“x5c“: ...“x5c“:   ...
-
-ATTESTATION STATEMENT(in "packed" attestation statement format)[Other attestation statement formats are as defined in their respective sections below]
+
+    
+    ATTESTATION OBJECT
+    
+        
+            “authData“:   ...
+            
+        
+        
+            
+            “fmt“:   “packed“
+        
+        
+            
+            “attStmt“:   ...
+        
+    
+    
+        
+        
+    
+    
+        
+        
+        
+        
+        
+        
+            
+            
+            
+        
+        variable length if present (CBOR)
+        AUTHENTICATOR DATA
+        
+        AAGUID
+        
+         
+        L
+        
+        CREDENTIAL ID
+        CREDENTIAL PUBLIC KEY
+        
+        variable length (COSE_Key)
+        L bytes(variable length)
+        2 bytes
+        16 bytes
+        
+            
+            
+        
+        
+            
+            
+        
+        
+            
+            
+        
+        
+        RP ID HASH
+        FLAGS
+        COUNTER
+        ATTESTED CRED. DATA
+        EXTENSIONS
+        32 bytes
+        1 byte
+        4 bytes (big-endian uint32)
+        variable length 
+        
+            
+            
+            
+            
+            
+            
+            
+            
+            
+            
+            
+            
+            
+            
+            
+            UV
+            UP
+            0
+            7
+            ED
+            AT
+            0
+            BS
+            BE
+            0
+        
+    
+    
+        
+        
+    
+    
+        
+        
+    
+    
+    
+        
+            
+                
+                “sig“:   ...
+            
+            
+                
+                “alg“:   ...
+            
+            
+                
+                “x5c“:   ...
+            
+        
+        
+            ATTESTATION STATEMENT
+            (in "packed" attestation statement format)
+        
+    
+
diff --git a/images/fido-signature-formats-figure1.svg b/images/fido-signature-formats-figure1.svg
index 1b15f56be..f369fc4db 100644
--- a/images/fido-signature-formats-figure1.svg
+++ b/images/fido-signature-formats-figure1.svg
@@ -1,479 +1,80 @@
-
-
-
-image/svg+xmlauthenticatorDataLayer 1RP ID HASH
-FLAGS
-0
-BS
-BE
-AT
-
-ED
-UP
-COUNTER
-ATTESTED CRED. DATA
-
-EXTENSIONS
-32 bytes
-
-
-1 byte
-
-
-
-
-4 bytes (big-endian uint32)
-
-
-variable length if present
-
-
-
-
-
-
-variable length if present (CBOR)
-7
-UV
-0
-0
-
+
+    
+    
+        
+            
+                
+            
+        
+        
+            
+                
+            
+        
+        
+            
+                
+            
+        
+        
+            
+                
+            
+        
+    
+    
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        
+        RP ID HASH
+        
+        FLAGS
+        0
+        BS
+        BE
+        AT
+        ED
+        UP
+        
+        COUNTER
+        
+        
+        ATTESTED CRED. DATA
+        
+        EXTENSIONS
+        32 bytes
+        
+            
+            
+            
+        
+        
+        1 byte
+        
+        4 bytes (big-endian uint32)
+        
+        variable length if present
+        variable length if present (CBOR)
+        7
+        UV
+        0
+        0
+        
+        
+    
+
\ No newline at end of file
diff --git a/images/fido-signature-formats-figure2.svg b/images/fido-signature-formats-figure2.svg
index 23049600c..c5e53ef29 100644
--- a/images/fido-signature-formats-figure2.svg
+++ b/images/fido-signature-formats-figure2.svg
@@ -1,286 +1,43 @@
-
-
-  
-   Produced by OmniGraffle 6.2.5 2015-08-20 23:19:13 +0000
-
-  
-    image/svg+xml
-    
-  
-
-
-  
-    
-      
-        
-      
-    
-    
-      
-        
-      
-    
-    
-      
-        
-      
-    
-  
-  
-  
-    authenticatorData
-  
-  
-  
-    clientDataHash
-  
-  
-    Generated by authenticator
-  
-  
-    Received from client
-  
-  
-  
-  
-    ||
-  
-  
-  
-  
-  
-    ASSERTION SIGNATURE
-  
-  
-  
-    Sign
-  
-  
-  
-  
-  
-    Private key
-  
-  
-
+
+    
+        
+            
+        
+    
+    
+    
+    authenticatorData
+  
+    
+    
+    clientDataHash
+  
+    
+    Generated by authenticator
+  
+    
+    Received from client
+  
+    
+    
+    
+    ||
+  
+    
+    
+    
+    
+    ASSERTION SIGNATURE
+  
+    
+    
+    Sign
+  
+    
+    
+    
+    
+    Private key
+  
+    
+
\ No newline at end of file
diff --git a/images/string-truncation.svg b/images/string-truncation.svg
index 54197159a..16bc2ec34 100644
--- a/images/string-truncation.svg
+++ b/images/string-truncation.svg
@@ -1,326 +1,27 @@
-
-
-
-
-  
-  
-  
-    
-      
-        image/svg+xml
-        
-        
-      
-    
-  
-  
-    61 67 cc 88
-    
-    
-    
-    
-    Codepoints
-    Graphemeclusters
-    
-    
-    
-    [63]
-    [64]
-    [62]
-    [61]
-    
-    
-    
-    
-    Bytes
-    UTF-8codepoints
-    Graphemeclusters
-    Truncationpoints
-    Suffix atgiven point
-    ag̈
-    (error)
-    ag
-    a
-  
-
+
+    
+        61 67 cc 88
+        
+        
+        Codepoints
+        Graphemeclusters
+        
+        
+        
+        [63]
+        [64]
+        [62]
+        [61]
+        
+        
+        Bytes
+        UTF-8codepoints
+        Graphemeclusters
+        Truncationpoints
+        Suffix atgiven point
+        ag̈
+        (error)
+        ag
+        a
+    
+
\ No newline at end of file
diff --git a/images/webauthn-authentication-flow-01.svg b/images/webauthn-authentication-flow-01.svg
index cb633bfa5..01c3731b8 100644
--- a/images/webauthn-authentication-flow-01.svg
+++ b/images/webauthn-authentication-flow-01.svg
@@ -1,858 +1,123 @@
-
-
-  
-  
-    
-      
-    
-    
-      
-    
-    
-      
-        
-      
-    
-    
-      
-        
-      
-    
-    
-      
-        
-      
-    
-    
-      
-        
-      
-    
-    
-      
-        
-      
-    
-  
-   Produced by OmniGraffle 7.7.1 
-    2018-06-26 16:26:03 +0000
-
-  
-    image/svg+xml
-    
-    
-  
-
-
-  
-    Authentication WebAuthn
-    
-      Layer 1
-      
-        
-        
-          
+
+    
+        
+            
+        
+        
+            
+        
+        
+            
+        
+    
+    
+        
+        
+            
         
-        
-          
+        
+            
         
-      
-      
-        
-        
-          
+        
+        
+            
         
-        
-          
+        
+            
         
-      
-      
-        
-      
-      
-        
-        
-        
-          Relying Party Server
-        
-      
-      
-        
-        
-        
-          Authenticator
-        
-      
-      
-        
-      
-      
-        
-      
-      
-        
-      
-      
-        
-      
-      
-        
-          challenge
-        
-      
-      
-        
-          relying party id,
-          clientDataHash
-        
-      
-      
-        
-          authenticatorData
-          signature
-        
-      
-      
-        
-          clientDataJSON,
-          authenticatorData,
-          signature
-        
-      
-      
-        
-        
-        
-          1
-        
-      
-      
-        
-        
-        
-          2
-        
-      
-      
-        
-        
-        
-          5
-        
-      
-      
-        
-        
-        
-          4
-        
-      
-      
-        
-        
-        
-          3
-        
-      
-      
-        
-          user verification,
-          create assertion
-        
-      
-      
-        
-        
-        
-          Browser
-        
-      
-      
-        
-        
-        
-          RP JavaScript Application
-        
-      
-      
-        
-        
-        
-          6
-        
-      
-      
-        
-        
-        
-          0
-        
-      
-      
-        
-          server validation
-        
-      
-      
-        
-          AuthenticatorAssertionResponse
-        
-      
-      
-        
-          PublicKeyCredentialRequestOptions
-        
-      
-      
-        
-          WebAuthnAPI
-        
-        
-      
-      
+        
+        
+        
+        
+          Relying Party Server
+        
+        
+        
+        
+          Authenticator
+        
+        
+        
+        
+        
+        
+          challenge
+        
+        
+          relying party id,
+          clientDataHash
+        
+        
+          authenticatorData
+          signature
+        
+        
+          clientDataJSON,
+          authenticatorData,
+          signature
+        
+        
+        
+        
+          1
+        
+        
+        
+        
+          2
+        
+        
+        
+        
+          5
+        
+        
+        
+        
+          4
+        
+        
+        
+        
+          3
+        
+        
+          user verification,
+          create assertion
+        
+        
+        
+        
+          Browser
+        
+        
+        
+        
+          RP JavaScript Application
+        
+        
+        
+        
+          6
+        
+        
+        
+        
+          0
+        
+        
+          server validation
+        
+        
+          AuthenticatorAssertionResponse
+        
+        
+          PublicKeyCredentialRequestOptions
+        
+        
+          WebAuthnAPI
+        
+        
+        
     
-  
-
+
\ No newline at end of file
diff --git a/images/webauthn-registration-flow-01.svg b/images/webauthn-registration-flow-01.svg
index e9ca9e8b0..3d197f8c8 100644
--- a/images/webauthn-registration-flow-01.svg
+++ b/images/webauthn-registration-flow-01.svg
@@ -1,877 +1,132 @@
-
-
-  
-  
-    
-      
-        
-      
-    
-    
-      
-        
-      
-    
-    
-      
-        
-      
-    
-    
-      
-        
-      
-    
-    
-      
-        
-      
-    
-  
-   Produced by OmniGraffle 7.7.1 
-    2018-06-26 16:26:03 +0000
-
-  
-    image/svg+xml
-    
-    
-  
-
-
-  
-    Layer 1
-    
-      
-      
-        
-      
-      
-        
-      
-    
-    
-      
-      
-        
-      
-      
-        
-      
-    
-    
-      
-      
-        
-      
-      
-        
-      
-    
-    
-      
-    
-    
-      
-      
-      
-        Relying Party Server
-      
-    
-    
-      
-      
-      
-        Authenticator
-      
-    
-    
-      
-    
-    
-      
-    
-    
-      
-    
-    
-      
-    
-    
-      
-        challenge,
-        user info,
-        relying party info
-      
-    
-    
-      
-        relying party id
-        ,
-        user info,
-        relying party info,
-        clientDataHash
-      
-    
-    
-      
-        new public key,
-        credential id,
-        attestation
-      
-    
-    
-      
-        clientDataJSON,
-        attestationObject
-      
-    
-    
-      
-      
-      
-        1
-      
-    
-    
-      
-      
-      
-        2
-      
-    
-    
-      
-      
-      
-        5
-      
-    
-    
-      
-      
-      
-        4
-      
-    
-    
-      
-      
-      
-        3
-      
-    
-    
-      
-        user verification,
-        new keypair,
-        attestation
-      
-    
-    
-      
-        attestationObject
-      
-    
-    
-      
-      
-      
-        Browser
-      
-    
-    
-      
-      
-      
-        RP JavaScript Application
-      
-    
-    
-      
-      
-      
-        6
-      
-    
-    
-      
-      
-      
-        0
-      
-    
-    
-      
-        server validation
-      
-    
-    
-      
-        AuthenticatorAttestationResponse
-      
-      
-    
-    
-      
-        PublicKeyCredentialCreationOptions
-      
-    
-  
-
+
+    
+        
+            
+        
+        
+            
+        
+    
+    
+        
+        
+            
+        
+        
+            
+        
+        
+        
+            
+        
+        
+            
+        
+        
+        
+            
+        
+        
+            
+        
+        
+        
+        
+        
+        Relying Party Server
+      
+        
+        
+        
+        Authenticator
+      
+        
+        
+        
+        
+        
+        challenge,
+        user info,
+        relying party info
+      
+        
+        relying party id
+        ,
+        user info,
+        relying party info,
+        clientDataHash
+      
+        
+        new public key,
+        credential id,
+        attestation
+      
+        
+        clientDataJSON,
+        attestationObject
+      
+        
+        
+        
+        1
+      
+        
+        
+        
+        2
+      
+        
+        
+        
+        5
+      
+        
+        
+        
+        4
+      
+        
+        
+        
+        3
+      
+        
+        user verification,
+        new keypair,
+        attestation
+      
+        
+        attestationObject
+      
+        
+        
+        
+        Browser
+      
+        
+        
+        
+        RP JavaScript Application
+      
+        
+        
+        
+        6
+      
+        
+        
+        
+        0
+      
+        
+        server validation
+      
+        
+        AuthenticatorAttestationResponse
+      
+        
+        
+        PublicKeyCredentialCreationOptions
+      
+    
+
\ No newline at end of file

From 28cef52d2e059a9bc503ea715b00795e5e3f4899 Mon Sep 17 00:00:00 2001
From: Tim Cappalli 
Date: Tue, 14 Jan 2025 08:54:23 -0500
Subject: [PATCH 3/3] s/width/no-autosize

---
 index.bs | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/index.bs b/index.bs
index fae35d0d0..9b9c425f6 100644
--- a/index.bs
+++ b/index.bs
@@ -1463,7 +1463,7 @@ browser to create a new credential for future use by the [=[RP]=]. See 
-    
+    
     
Registration Flow

 
 
@@ -1473,7 +1473,7 @@ Scripts can also request the user’s permission to perform
 
 
 

-    
+    
     
Authentication Flow

 

 
@@ -4790,7 +4790,7 @@ the requested [=public key credential|credential=] is [=scoped=] to exactly matc
 Figure  shows a visual representation of the [=authenticator data=] structure.
 
 

-    
+    
     
[=Authenticator data=] layout.

 

 
@@ -5380,7 +5380,7 @@ a numbered step. If outdented, it (today) is rendered as a bullet in the midst o
     client data=] (which potentially has a variable length) is always the last element.
 
     

-        
+        
         
Generating an [=assertion signature=].

     

 
@@ -5492,7 +5492,7 @@ Since that leaves a partial UTF-8 code point, the remainder of that code point m
 Since that leaves a partial [=grapheme cluster=], the remainder of that cluster should also be removed.
 
 

-    
+    
     
The end of a UTF-8 encoded string showing the positions of different truncation boundaries.

 

 
@@ -5573,7 +5573,7 @@ for the [=[RP]=] to base a trust decision on.
 In these cases, the [=authenticator=] provides no guarantees about its operation to the [=[RP]=].
 
 

-    
+    
     
[=Attestation object=] layout illustrating the included [=authenticator data=] (containing [=attested credential
     data=]) and the [=attestation statement=].