From 5d74429fba21da5c194489e7d74c14efc220b7cf Mon Sep 17 00:00:00 2001 From: John Bradley Date: Wed, 13 Nov 2024 18:10:25 -0300 Subject: [PATCH] Update index.bs Allow the passing of the aaguid for all Authenticators, not just the platform ones. --- index.bs | 1 - 1 file changed, 1 deletion(-) diff --git a/index.bs b/index.bs index 82da64d74..14d9102eb 100644 --- a/index.bs +++ b/index.bs @@ -2171,7 +2171,6 @@ a numbered step. If outdented, it (today) is rendered as a bullet in the midst o 1. If the [=authData/attestedCredentialData/aaguid=] in the [=attested credential data=] is 16 zero bytes, |credentialCreationData|.[=attestationObjectResult=].fmt is "packed", and "x5c" is absent from |credentialCreationData|.[=attestationObjectResult=], then [=self attestation=] is being used and no further action is needed. 1. Otherwise: 1. Set the value of |credentialCreationData|.[=attestationObjectResult=].fmt to "none", and set the value of |credentialCreationData|.[=attestationObjectResult=].attStmt to be an empty [=CBOR=] map. (See [[#sctn-none-attestation]] and [[#sctn-generating-an-attestation-object]]). - 1. If |authenticator| is not a [=platform authenticator=] then replace the [=authData/attestedCredentialData/aaguid=] in the [=attested credential data=] with 16 zero bytes. : {{AttestationConveyancePreference/indirect}} :: The client MAY replace the [=authData/attestedCredentialData/aaguid=] and [=attestation statement=] with a more privacy-friendly