Place Your Ad Here

Bug PassKey implementation is not compliant with WebAuthn standard

There is a bug in this version
K

Kirby

Guest
https://www.w3.org/TR/webauthn-2/#sctn-user-handle-privacy
Since the user handle is not considered personally identifying information in § 14.4.2 Privacy of personally identifying information Stored in Authenticators, the Relying Party MUST NOT include personally identifying information, e.g., e-mail addresses or usernames, in the user handle. This includes hash values of personally identifying information, unless the hash function is salted with...
Click to expand...
Click to expand...

Read more

Continue reading...
 
You must log in or register to reply here.

Similar threads

K
Solved Passkey implementation is not compliant with Web Authentication standard
Replies
0
Views
48
XenForo General Discussions
Kirby
K
S
Bug Passkey Auth won't remember me on multiple devices
Replies
0
Views
40
XenForo General Discussions
stromb0li
S
S
Solved Missing phrase for Passkey login on admin page
Replies
0
Views
47
XenForo General Discussions
Simon2
S
S
Bug Missing phrase for Passkey login on admin page
Replies
0
Views
46
XenForo General Discussions
Simon2
S
K
Bug Passkey removal does not invalidate existing sessions
Replies
0
Views
44
XenForo General Discussions
Kirby
K
Top Bottom
Back