Skip to content

Commit

Permalink
Update index.bs
Browse files Browse the repository at this point in the history
Allow the passing of the aaguid for all Authenticators, not just the platform ones.
  • Loading branch information
ve7jtb committed Nov 13, 2024
1 parent 814e03a commit 5d74429
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion index.bs
Original file line number Diff line number Diff line change
Expand Up @@ -2171,7 +2171,6 @@ a numbered step. If outdented, it (today) is rendered as a bullet in the midst o
1. If the [=authData/attestedCredentialData/aaguid=] in the [=attested credential data=] is 16 zero bytes, <code>|credentialCreationData|.[=attestationObjectResult=].fmt</code> is "packed", and "x5c" is absent from <code>|credentialCreationData|.[=attestationObjectResult=]</code>, then [=self attestation=] is being used and no further action is needed.
1. Otherwise:
1. Set the value of <code>|credentialCreationData|.[=attestationObjectResult=].fmt</code> to "none", and set the value of <code>|credentialCreationData|.[=attestationObjectResult=].attStmt</code> to be an empty [=CBOR=] map. (See [[#sctn-none-attestation]] and [[#sctn-generating-an-attestation-object]]).
1. If |authenticator| is not a [=platform authenticator=] then replace the [=authData/attestedCredentialData/aaguid=] in the [=attested credential data=] with 16 zero bytes.

: {{AttestationConveyancePreference/indirect}}
:: The client MAY replace the [=authData/attestedCredentialData/aaguid=] and [=attestation statement=] with a more privacy-friendly
Expand Down

0 comments on commit 5d74429

Please sign in to comment.