Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Make AuthenticatorSelectionCriteria more complete. #441

Closed
rlin1 opened this issue May 4, 2017 · 6 comments
Closed

Make AuthenticatorSelectionCriteria more complete. #441

rlin1 opened this issue May 4, 2017 · 6 comments
Assignees
@rlin1
Labels
subtype:algorithms/WebIDL subtype:extensions type:technical
Milestone
L2-WD-02

Comments

@rlin1
Copy link
Contributor

rlin1 commented May 4, 2017

We have an extension for selecting the authenticator based on a list of AAGUIDs, then we recently added the more generic AuthenticatorSelectionCriteria.

We should move the extension into this new AuthenticatorSelectionCriteria in order to concentrate all authenticator selection related criteria (authenticator policy) into one single entity.
@rlin1 rlin1 self-assigned this May 4, 2017
@rlin1
Copy link
Contributor Author

rlin1 commented May 4, 2017

See branch authnr-sel-addtl-fields

rlin1 added a commit that referenced this issue May 4, 2017
@rlin1
move AAGUID for selecting authenticator into new AuthenticatorSelecti…
4e2c4db 
…onCriteria. See #441
@rlin1 rlin1 mentioned this issue May 4, 2017
Closed
@equalsJeffH equalsJeffH added this to the CR milestone May 8, 2017
@nadalin
Copy link
Contributor

nadalin commented Sep 7, 2017

@rlin1 please close as PR was merged

@nadalin nadalin modified the milestones: L2-WD-00, CR Sep 7, 2017
@nadalin
Copy link
Contributor

nadalin commented Sep 7, 2017

@rlin1 moving this to next level as all authenticator selection criteria enhancements are for next release

@rlin1
Copy link
Contributor Author

rlin1 commented Oct 22, 2018

Christiaan Brand: want to prevent fragmentation and hence only want generic authenticator selection criteria - not by AAGUID.
Regarding selecting TEE (or SE) backed authenticators: Not a real issue as there might be other ways on the platform to determine whether TEE backed authenticator would be available on the platform.
When making the final decision, the RP can look into attestation to verify whether the keyProtection requirement is met.

@rlin1
Copy link
Contributor Author

rlin1 commented Oct 22, 2018

Decision:Keep open for now and re-visit later.

@nadalin nadalin modified the milestones: L2-WD-01, L2-WD-02 Feb 20, 2019
@nadalin
Copy link
Contributor

nadalin commented Mar 7, 2019

Per 03/07/19 F2F Close

@nadalin nadalin closed this as completed Mar 7, 2019
@emlun emlun mentioned this issue Mar 31, 2022
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@rlin1 rlin1

Labels
subtype:algorithms/WebIDL subtype:extensions type:technical
Projects
None yet
Milestone
L2-WD-02
Development

No branches or pull requests
3 participants
@equalsJeffH @rlin1 @nadalin