Skip to content

Commit

Permalink
fix 711 identifier internal slot contains credID
Browse files Browse the repository at this point in the history
  • Loading branch information
JeffH authored and JeffH committed Dec 19, 2017
1 parent 986d627 commit 1651dcb
Showing 1 changed file with 5 additions and 3 deletions.
8 changes: 5 additions & 3 deletions index.bs
Original file line number Diff line number Diff line change
Expand Up @@ -590,9 +590,11 @@ that are returned to the caller when a new credential is created, or a new asser
"{{Credential/[[discovery]]/remote}}".

: <dfn>\[[identifier]]</dfn>
:: This [=internal slot=] contains an identifier for the credential, chosen by the platform with help from the
authenticator. This identifier is used to look up credentials for use, and is therefore expected to be globally unique
with high probability across all credentials of the same type, across all authenticators. This API does not constrain
:: This [=internal slot=] contains the [=credential ID=], chosen by the platform with help from the authenticator.
The [=credential ID=] is used to look up credentials for use, and is therefore expected to be globally unique
with high probability across all credentials of the same type, across all authenticators.

Note: This API does not constrain
the format or length of this identifier, except that it must be sufficient for the platform to uniquely select a key.
For example, an authenticator without on-board storage may create identifiers containing a [=credential private key=]
wrapped with a symmetric key that is burned into the authenticator.
Expand Down

0 comments on commit 1651dcb

Please sign in to comment.