You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I've got a sample prf tester HTML doc in a gist that has seemed to survive scrutiny so far (or maybe it's the reason why people are doing prf incorrectly 😅)
Anything in here we might want to borrow? That said there are plenty of footguns with prf and so if we do include examples we should include plenty of disclaimers that e.g. deleting a passkey permanently prevents access to anything protected by that passkey's corresponding PRF bytes.
From WG Meeting @ 7/17: Examples of using PRF seem more applicable as either test vectors or as externally produced documentation. Let's bucket this as something to address as part of #1633.
Proposed Change
Multiple people who are implementing PRF extensions have got the implementation wrong regarding extension fields in request and response.
We have to add some examples for this extension.
The text was updated successfully, but these errors were encountered: