ntent to Implement and Ship: WebAuthn getPublicKey[Algorithm]() and getAuthenticatorData()

30 views
Skip to first unread message

Adam Langley

unread,
May 26, 2020, 1:14:02 PM5/26/20
to blink-dev
a...@chromium.org https://w3c.github.io/webauthn/#sctn-public-key-easy Specification: https://w3c.github.io/webauthn/#sctn-public-key-easy No. Only minor API change. The draft of WebAuthn level two includes accessors that save sites from having to parse CBOR and COSE in order to use security keys. This status entry covers implementation of these accessors in Chromium. CBOR and COSE are somewhat obscure at this time and there's no need for most sites to have to worry about them as the browser is capable of translating them into more standard formats.
Only new functions getting added. Firefox: Public support (https://github.com/w3c/webauthn/pull/1395) (J.C. reviewed spec PR.) Edge: No public signals Safari: No public signals Web developers: No signals

Android support will come later. Android WebView does not support security key interactions due to the need to authenticate the calling site.

Reilly Grant

unread,
May 26, 2020, 1:20:30 PM5/26/20
to Adam Langley, blink-dev
The subject line is missing the first letter of the word "Intent" so this probably won't be picked up by automated scripts. I recommend resending this intent with a corrected subject line.
Reilly Grant | Software Engineer | rei...@chromium.org | Google Chrome


--
You received this message because you are subscribed to the Google Groups "blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAL9PXLwxAkMNzUQUJe396igfvk%3DSVHPiu95NP6kE783q9TegMg%40mail.gmail.com.

Adam Langley

unread,
May 26, 2020, 1:23:37 PM5/26/20
to Reilly Grant, blink-dev
On Tue, May 26, 2020 at 10:20 AM Reilly Grant <rei...@chromium.org> wrote:
The subject line is missing the first letter of the word "Intent" so this probably won't be picked up by automated scripts. I recommend resending this intent with a corrected subject line.

Thanks for noticing that. Will do. 
Reply all
Reply to author
Forward
0 new messages