MDS3 package for FIDO 2 Server interop testing

[Monty Wiseman]

For FIDO 2 server interop test requires a specific MDS3 (not MDS2) package. Where do we get it?

 

Monty Wiseman

Security Architect, Beyond Identity

www.beyondidentity.com

 

[Dan]

Yes, that's correct. You'll need to create it for your device. FIDO Alliance may be willing to help with translating MDS2 to MDS3, but it's pretty straightforward using the two specs side by side. I used the following links to compare and convert

MDS2

• Metadata Statement
  
• Metadata Service
• Predefined Values

MDS3

• Metadata Service
• Metadata Statement
• Predefined Values

[Monty Wiseman]

Dan,

This is for server interop, not the device/Authenticator. Our server team informs me that there is a specific MDS3 package the FIDO interop test is requiring which the test uses to validate interoperability. If we generate our own, it will not match what the interop test is requiring and likely not match what others are using if they also generate their own. Alternately are you saying we should take the MDS2 package that is provided and convert it to MDS3 ourselves? Seems that might lead to indeterminate and possibly inconsistent test results. Can someone create an “official” one for all to use?

 

Monty

[Daniel Bujak]

Apologies, I misunderstood. I was indeed talking about the authenticator rather than server side. Maybe try reaching out to Fidos certification team if no one here can help. They are usually pretty quick about getting back

[Ackermann Yuriy]

You will get interop metadata prior to the introp.

For conformance testing see giant "DOWNLOAD METADATA" button in the test tools.

Yuriy Ackermann

FIDO, Identity, Standards

skype: ackermann.yuriy

github: @herrjemand

twitter: @herrjemand

medium: @herrjemand

--
You received this message because you are subscribed to the Google Groups "FIDO Dev (fido-dev)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fido-dev+u...@fidoalliance.org.
To view this discussion on the web visit https://groups.google.com/a/fidoalliance.org/d/msgid/fido-dev/CAFnyz%2BW0R6V-i7jKMABxh5avaAWSmW8Y%2BxkiX5bAXW4Ogd-U9w%40mail.gmail.com.