diff --git a/index.html b/index.html
index 9f5594694..761bac842 100644
--- a/index.html
+++ b/index.html
@@ -4,9 +4,9 @@
   <title>Web Authentication: An API for accessing Public Key Credentials - Level 3</title>
   <meta content="width=device-width, initial-scale=1, shrink-to-fit=no" name="viewport">
   <meta content="ED" name="w3c-status">
-  <meta content="Bikeshed version 78f8c09c, updated Tue May 19 10:51:23 2020 -0700" name="generator">
+  <meta content="Bikeshed version 21183bac3, updated Tue Jun 15 10:19:19 2021 -0700" name="generator">
   <link href="https://www.w3.org/TR/webauthn-3/" rel="canonical">
-  <meta content="ff7c7154754215f9f256600d0c0b0fa278703fcd" name="document-revision">
+  <meta content="1823a4b0430ee9a9754b69f6eabb8e359a45b900" name="document-revision">
 <style type="text/css">
 body {
     counter-reset: table;
@@ -372,7 +372,7 @@
    <header>
     <p data-fill-with="logo"><a href="https://www.w3.org/"><img alt="W3C" height="48" src="https://www.w3.org/StyleSheets/TR/2016/logos/W3C" width="72"></a> </p>
     <h1>Web Authentication:<br>An API for accessing Public Key Credentials<br>Level 3</h1>
-    <h2 class="no-num no-toc no-ref heading settled" id="subtitle"><span class="content">Editor’s Draft, <time class="dt-updated" datetime="2021-05-05">5 May 2021</time></span></h2>
+    <h2 class="no-num no-toc no-ref heading settled" id="profile-and-date"><span class="content">Editor’s Draft, <time class="dt-updated" datetime="2021-06-16">16 June 2021</time></span></h2>
    </header>
    <div data-fill-with="spec-metadata">
     <dl>
@@ -406,6 +406,7 @@ <h2 class="no-num no-toc no-ref heading settled" id="subtitle"><span class="cont
      <dd><a href="mailto:cbrand@google.com">Christiaan Brand</a> (Google)
      <dd><a href="mailto:agl@google.com">Adam Langley</a> (Google)
      <dd><a href="mailto:mandyam@qti.qualcomm.com">Giridhar Mandyam</a> (Qualcomm)
+     <dd><a href="mailto:mattmil3@cisco.com">Matthew Miller</a> (Cisco)
      <dd><a href="mailto:nsatragno@google.com">Nina Satragno</a> (Google)
      <dd><a href="mailto:nick.steele@gemini.com">Nick Steele</a> (Gemini)
      <dd><a href="mailto:jiewen_tan@apple.com">Jiewen Tan</a> (Apple)
@@ -448,7 +449,7 @@ <h2 class="no-num no-toc no-ref heading settled" id="status"><span class="conten
     includes instructions for disclosing a patent. An individual who has actual knowledge of a
     patent which the individual believes contains <a href="https://www.w3.org/Consortium/Patent-Policy/#def-essential">Essential
     Claim(s)</a> must disclose the information in accordance with <a href="https://www.w3.org/Consortium/Patent-Policy/#sec-Disclosure">section 6 of the <abbr title="World Wide Web Consortium">W3C</abbr> Patent Policy</a>. </p>
-   <p> This document is governed by the <a href="https://www.w3.org/2019/Process-20190301/" id="w3c_process_revision">1 March 2019 W3C Process Document</a>. </p>
+   <p> This document is governed by the <a href="https://www.w3.org/2020/Process-20200915/" id="w3c_process_revision">15 September 2020 W3C Process Document</a>. </p>
    <p></p>
   </div>
   <div data-fill-with="at-risk"></div>
@@ -1339,11 +1340,12 @@ <h2 class="heading settled" data-level="4" id="sctn-terminology"><span class="se
    <dl>
     <dt data-md><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="attestation">Attestation</dfn>
     <dd data-md>
-     <p>Generally, <em>attestation</em> is a statement serving to bear witness, confirm, or authenticate.
-In the WebAuthn context, <a data-link-type="dfn" href="#attestation" id="ref-for-attestation③">attestation</a> is employed to <em>attest</em> to the <em>provenance</em> of an <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②③">authenticator</a> and the data it emits; including, for example: <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id④">credential IDs</a>, <a data-link-type="dfn" href="#credential-key-pair" id="ref-for-credential-key-pair">credential key pairs</a>, signature counters, etc. An <a data-link-type="dfn" href="#attestation-statement" id="ref-for-attestation-statement">attestation statement</a> is conveyed in an <a data-link-type="dfn" href="#attestation-object" id="ref-for-attestation-object">attestation object</a> during <a data-link-type="dfn" href="#registration" id="ref-for-registration③">registration</a>. See also <a href="#sctn-attestation">§ 6.5 Attestation</a> and <a href="#fig-attStructs">Figure 6</a>. Whether or how the <a data-link-type="dfn" href="#client" id="ref-for-client⑥">client</a> conveys the <a data-link-type="dfn" href="#attestation-statement" id="ref-for-attestation-statement①">attestation statement</a> and <a data-link-type="dfn" href="#aaguid" id="ref-for-aaguid">AAGUID</a> portions of the <a data-link-type="dfn" href="#attestation-object" id="ref-for-attestation-object①">attestation object</a> to the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③③">Relying Party</a> is described by <a data-link-type="dfn" href="#attestation-conveyance" id="ref-for-attestation-conveyance">attestation conveyance</a>.</p>
+     <p>Generally, <em>attestation</em> is a statement that serves to bear witness, confirm, or authenticate.
+In the WebAuthn context, <a data-link-type="dfn" href="#attestation" id="ref-for-attestation③">attestation</a> is employed to provide verifiable evidence as to the origin of an <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②③">authenticator</a> and the data it emits. This includes such things as <a data-link-type="dfn" href="#credential-id" id="ref-for-credential-id④">credential IDs</a>, <a data-link-type="dfn" href="#credential-key-pair" id="ref-for-credential-key-pair">credential key pairs</a>, <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter">signature counters</a>, etc.</p>
+     <p>An <a data-link-type="dfn" href="#attestation-statement" id="ref-for-attestation-statement">attestation statement</a> is provided within an <a data-link-type="dfn" href="#attestation-object" id="ref-for-attestation-object">attestation object</a> during a <a data-link-type="dfn" href="#registration" id="ref-for-registration③">registration</a> ceremony. See also <a href="#sctn-attestation">§ 6.5 Attestation</a> and <a href="#fig-attStructs">Figure 6</a>. Whether or how the <a data-link-type="dfn" href="#client" id="ref-for-client⑥">client</a> conveys the <a data-link-type="dfn" href="#attestation-statement" id="ref-for-attestation-statement①">attestation statement</a> and <a data-link-type="dfn" href="#aaguid" id="ref-for-aaguid">AAGUID</a> portions of the <a data-link-type="dfn" href="#attestation-object" id="ref-for-attestation-object①">attestation object</a> to the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③③">Relying Party</a> is described by <a data-link-type="dfn" href="#attestation-conveyance" id="ref-for-attestation-conveyance">attestation conveyance</a>.</p>
     <dt data-md><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="attestation-certificate">Attestation Certificate</dfn>
     <dd data-md>
-     <p>A X.509 Certificate for the <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="attestation-key-pair">attestation key pair</dfn> used by an <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②④">authenticator</a> to attest to its manufacture
+     <p>An X.509 Certificate for the <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="attestation-key-pair">attestation key pair</dfn> used by an <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②④">authenticator</a> to attest to its manufacture
 and capabilities. At <a data-link-type="dfn" href="#registration" id="ref-for-registration④">registration</a> time, the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑤">authenticator</a> uses the <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="attestation-private-key">attestation private key</dfn> to sign
 the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③④">Relying Party</a>-specific <a data-link-type="dfn" href="#credential-public-key" id="ref-for-credential-public-key②">credential public key</a> (and additional data) that it generates and returns via the <a data-link-type="dfn" href="#authenticatormakecredential" id="ref-for-authenticatormakecredential">authenticatorMakeCredential</a> operation. <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③⑤">Relying Parties</a> use the <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="attestation-public-key">attestation public key</dfn> conveyed in the <a data-link-type="dfn" href="#attestation-certificate" id="ref-for-attestation-certificate">attestation
 certificate</a> to verify the <a data-link-type="dfn" href="#attestation-signature" id="ref-for-attestation-signature">attestation signature</a>. Note that in the case of <a data-link-type="dfn" href="#self-attestation" id="ref-for-self-attestation">self attestation</a>, the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator②⑥">authenticator</a> has no distinct <a data-link-type="dfn" href="#attestation-key-pair" id="ref-for-attestation-key-pair">attestation key pair</a> nor <a data-link-type="dfn" href="#attestation-certificate" id="ref-for-attestation-certificate①">attestation certificate</a>, see <a data-link-type="dfn" href="#self-attestation" id="ref-for-self-attestation①">self
@@ -1691,7 +1693,7 @@ <h2 class="heading settled" data-level="5" id="sctn-api"><span class="secno">5.
 requested by the same <a data-link-type="dfn" href="#rp-id" id="ref-for-rp-id①④">RP ID</a>. Separating the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/origin.html#concept-origin" id="ref-for-concept-origin⑧">origin</a> from the <a data-link-type="dfn" href="#rp-id" id="ref-for-rp-id①⑤">RP ID</a> in this way allows the API to be used in cases
 where a single <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party⑦④">Relying Party</a> maintains multiple <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/origin.html#concept-origin" id="ref-for-concept-origin⑨">origins</a>.</p>
    <p>The client facilitates these security measures by providing the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party⑦⑤">Relying Party</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/origin.html#concept-origin" id="ref-for-concept-origin①⓪">origin</a> and <a data-link-type="dfn" href="#rp-id" id="ref-for-rp-id①⑥">RP ID</a> to the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator⑤⑨">authenticator</a> for
-each operation. Since this is an integral part of the WebAuthn security model, user agents only expose this API to callers in <a data-link-type="dfn" href="https://w3c.github.io/webappsec-secure-contexts/#secure-contexts" id="ref-for-secure-contexts">secure contexts</a>.
+each operation. Since this is an integral part of the WebAuthn security model, user agents only expose this API to callers in <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#secure-context" id="ref-for-secure-context">secure contexts</a>.
 For web contexts in particular,
 this only includes those accessed via a secure transport (e.g., TLS) established without errors.</p>
    <p>The Web Authentication API is defined by the union of the Web IDL fragments presented in the following sections. A combined IDL
@@ -1709,41 +1711,12 @@ <h3 class="heading settled" data-level="5.1" id="iface-pkcredential"><span class
       <hr>
       <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
       <hr>
-      <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android yes"><span>Android WebView</span><span>70+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
+      <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
      </div>
     </div>
    </div>
    <p>The <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential①">PublicKeyCredential</a></code> interface inherits from <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credential" id="ref-for-credential①">Credential</a></code> <a data-link-type="biblio" href="#biblio-credential-management-1">[CREDENTIAL-MANAGEMENT-1]</a>, and contains the attributes
 that are returned to the caller when a new credential is created, or a new assertion is requested.</p>
-   <div class="mdn-anno wrapped">
-    <button class="mdn-anno-btn"><b class="all-engines-flag" title="This feature is in all current engines.">✔</b><span>MDN</span></button>
-    <div class="feature">
-     <p><a href="https://developer.mozilla.org/en-US/docs/Web/API/PublicKeyCredential/getClientExtensionResults" title="getClientExtensionResults() is a method of the PublicKeyCredential interface that returns an ArrayBuffer which contains a map between the extensions identifiers and their results after having being processed by the client.">PublicKeyCredential/getClientExtensionResults</a></p>
-     <p class="all-engines-text">In all current engines.</p>
-     <div class="support">
-      <span class="firefox yes"><span>Firefox</span><span>60+</span></span><span class="safari yes"><span>Safari</span><span>13+</span></span><span class="chrome yes"><span>Chrome</span><span>67+</span></span>
-      <hr>
-      <span class="opera no"><span>Opera</span><span>None</span></span><span class="edge_blink yes"><span>Edge</span><span>79+</span></span>
-      <hr>
-      <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
-      <hr>
-      <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android yes"><span>Android WebView</span><span>70+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
-     </div>
-    </div>
-    <div class="feature">
-     <p><a href="https://developer.mozilla.org/en-US/docs/Web/API/PublicKeyCredential/rawId" title="The rawId read-only property of the PublicKeyCredential interface is an ArrayBuffer object containing the identifier of the credentials.">PublicKeyCredential/rawId</a></p>
-     <p class="all-engines-text">In all current engines.</p>
-     <div class="support">
-      <span class="firefox yes"><span>Firefox</span><span>60+</span></span><span class="safari yes"><span>Safari</span><span>13+</span></span><span class="chrome yes"><span>Chrome</span><span>67+</span></span>
-      <hr>
-      <span class="opera no"><span>Opera</span><span>None</span></span><span class="edge_blink yes"><span>Edge</span><span>79+</span></span>
-      <hr>
-      <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
-      <hr>
-      <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android yes"><span>Android WebView</span><span>70+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
-     </div>
-    </div>
-   </div>
 <pre class="idl highlight def">[<a class="idl-code" data-link-type="extended-attribute" href="https://heycam.github.io/webidl/#SecureContext" id="ref-for-SecureContext"><c- g>SecureContext</c-></a>, <a class="idl-code" data-link-type="extended-attribute" href="https://heycam.github.io/webidl/#Exposed" id="ref-for-Exposed"><c- g>Exposed</c-></a>=<c- n>Window</c->]
 <c- b>interface</c-> <a class="idl-code" data-link-type="interface" href="#publickeycredential" id="ref-for-publickeycredential②"><c- g>PublicKeyCredential</c-></a> : <a data-link-type="idl-name" href="https://w3c.github.io/webappsec-credential-management/#credential" id="ref-for-credential②"><c- n>Credential</c-></a> {
     [<a class="idl-code" data-link-type="extended-attribute" href="https://heycam.github.io/webidl/#SameObject" id="ref-for-SameObject"><c- g>SameObject</c-></a>] <c- b>readonly</c-> <c- b>attribute</c-> <a class="idl-code" data-link-type="interface" href="https://heycam.github.io/webidl/#idl-ArrayBuffer" id="ref-for-idl-ArrayBuffer"><c- b>ArrayBuffer</c-></a>              <dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="attribute" data-export data-readonly data-type="ArrayBuffer" id="dom-publickeycredential-rawid"><code><c- g>rawId</c-></code></dfn>;
@@ -1756,7 +1729,24 @@ <h3 class="heading settled" data-level="5.1" id="iface-pkcredential"><span class
     <dd data-md>
      <p>This attribute is inherited from <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credential" id="ref-for-credential③">Credential</a></code>, though <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential③">PublicKeyCredential</a></code> overrides <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credential" id="ref-for-credential④">Credential</a></code>'s getter,
 instead returning the <a data-link-type="dfn" href="#base64url-encoding" id="ref-for-base64url-encoding">base64url encoding</a> of the data contained in the object’s <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-identifier-slot" id="ref-for-dom-publickeycredential-identifier-slot">[[identifier]]</a></code> <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-object-internal-methods-and-internal-slots" id="ref-for-sec-object-internal-methods-and-internal-slots①">internal slot</a>.</p>
-    <dt data-md><code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-rawid" id="ref-for-dom-publickeycredential-rawid">rawId</a></code>
+    <dt data-md>
+     <div class="mdn-anno wrapped">
+      <button class="mdn-anno-btn"><b class="all-engines-flag" title="This feature is in all current engines.">✔</b><span>MDN</span></button>
+      <div class="feature">
+       <p><a href="https://developer.mozilla.org/en-US/docs/Web/API/PublicKeyCredential/rawId" title="The rawId read-only property of the PublicKeyCredential interface is an ArrayBuffer object containing the identifier of the credentials.">PublicKeyCredential/rawId</a></p>
+       <p class="all-engines-text">In all current engines.</p>
+       <div class="support">
+        <span class="firefox yes"><span>Firefox</span><span>60+</span></span><span class="safari yes"><span>Safari</span><span>13+</span></span><span class="chrome yes"><span>Chrome</span><span>67+</span></span>
+        <hr>
+        <span class="opera no"><span>Opera</span><span>None</span></span><span class="edge_blink yes"><span>Edge</span><span>79+</span></span>
+        <hr>
+        <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
+        <hr>
+        <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
+       </div>
+      </div>
+     </div>
+     <p><code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-rawid" id="ref-for-dom-publickeycredential-rawid">rawId</a></code></p>
     <dd data-md>
      <p>This attribute returns the <code class="idl"><a data-link-type="idl" href="https://heycam.github.io/webidl/#idl-ArrayBuffer" id="ref-for-idl-ArrayBuffer①">ArrayBuffer</a></code> contained in the <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-identifier-slot" id="ref-for-dom-publickeycredential-identifier-slot①">[[identifier]]</a></code> internal slot.</p>
     <dt data-md>
@@ -1772,7 +1762,7 @@ <h3 class="heading settled" data-level="5.1" id="iface-pkcredential"><span class
         <hr>
         <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
         <hr>
-        <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android yes"><span>Android WebView</span><span>70+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
+        <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
        </div>
       </div>
      </div>
@@ -1782,7 +1772,24 @@ <h3 class="heading settled" data-level="5.1" id="iface-pkcredential"><span class
 credential</a>, or generate an <a data-link-type="dfn" href="#authentication-assertion" id="ref-for-authentication-assertion⑧">authentication assertion</a>. If the <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential④">PublicKeyCredential</a></code> is created in response to <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create" id="ref-for-dom-credentialscontainer-create②">create()</a></code>, this attribute’s value will be an <code class="idl"><a data-link-type="idl" href="#authenticatorattestationresponse" id="ref-for-authenticatorattestationresponse">AuthenticatorAttestationResponse</a></code>, otherwise,
 the <code class="idl"><a data-link-type="idl" href="#publickeycredential" id="ref-for-publickeycredential⑤">PublicKeyCredential</a></code> was created in response to <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get⑨">get()</a></code>, and this attribute’s value
 will be an <code class="idl"><a data-link-type="idl" href="#authenticatorassertionresponse" id="ref-for-authenticatorassertionresponse①">AuthenticatorAssertionResponse</a></code>.</p>
-    <dt data-md><code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-getclientextensionresults" id="ref-for-dom-publickeycredential-getclientextensionresults">getClientExtensionResults()</a></code>
+    <dt data-md>
+     <div class="mdn-anno wrapped">
+      <button class="mdn-anno-btn"><b class="all-engines-flag" title="This feature is in all current engines.">✔</b><span>MDN</span></button>
+      <div class="feature">
+       <p><a href="https://developer.mozilla.org/en-US/docs/Web/API/PublicKeyCredential/getClientExtensionResults" title="getClientExtensionResults() is a method of the PublicKeyCredential interface that returns an ArrayBuffer which contains a map between the extensions identifiers and their results after having being processed by the client.">PublicKeyCredential/getClientExtensionResults</a></p>
+       <p class="all-engines-text">In all current engines.</p>
+       <div class="support">
+        <span class="firefox yes"><span>Firefox</span><span>60+</span></span><span class="safari yes"><span>Safari</span><span>13+</span></span><span class="chrome yes"><span>Chrome</span><span>67+</span></span>
+        <hr>
+        <span class="opera no"><span>Opera</span><span>None</span></span><span class="edge_blink yes"><span>Edge</span><span>79+</span></span>
+        <hr>
+        <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
+        <hr>
+        <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
+       </div>
+      </div>
+     </div>
+     <p><code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-getclientextensionresults" id="ref-for-dom-publickeycredential-getclientextensionresults">getClientExtensionResults()</a></code></p>
     <dd data-md>
      <p>This operation returns the value of <code class="idl"><a data-link-type="idl" href="#dom-publickeycredential-clientextensionsresults-slot" id="ref-for-dom-publickeycredential-clientextensionsresults-slot">[[clientExtensionsResults]]</a></code>, which is a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-map" id="ref-for-ordered-map">map</a> containing <a data-link-type="dfn" href="#extension-identifier" id="ref-for-extension-identifier">extension identifier</a> → <a data-link-type="dfn" href="#client-extension-output" id="ref-for-client-extension-output">client extension output</a> entries produced by the extension’s <a data-link-type="dfn" href="#client-extension-processing" id="ref-for-client-extension-processing">client extension processing</a>.</p>
     <dt data-md><dfn class="idl-code" data-dfn-for="PublicKeyCredential" data-dfn-type="attribute" data-export id="dom-publickeycredential-type-slot"><code>[[type]]</code><a class="self-link" href="#dom-publickeycredential-type-slot"></a></dfn>
@@ -2602,7 +2609,7 @@ <h4 class="heading settled" data-level="5.1.7" id="sctn-isUserVerifyingPlatformA
        <hr>
        <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
        <hr>
-       <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android yes"><span>Android WebView</span><span>70+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
+       <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
       </div>
      </div>
     </div>
@@ -2625,7 +2632,7 @@ <h3 class="heading settled" data-level="5.2" id="iface-authenticatorresponse"><s
       <hr>
       <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
       <hr>
-      <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android yes"><span>Android WebView</span><span>70+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
+      <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
      </div>
     </div>
    </div>
@@ -2650,7 +2657,7 @@ <h3 class="heading settled" data-level="5.2" id="iface-authenticatorresponse"><s
          <hr>
          <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
          <hr>
-         <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android yes"><span>Android WebView</span><span>70+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
+         <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
         </div>
        </div>
       </div>
@@ -2673,7 +2680,7 @@ <h4 class="heading settled" data-level="5.2.1" id="iface-authenticatorattestatio
       <hr>
       <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
       <hr>
-      <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android yes"><span>Android WebView</span><span>70+</span></span><span class="samsunginternet_android yes"><span>Samsung Internet</span><span>10.0+</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
+      <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android yes"><span>Samsung Internet</span><span>10.0+</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
      </div>
     </div>
    </div>
@@ -2685,15 +2692,15 @@ <h4 class="heading settled" data-level="5.2.1" id="iface-authenticatorattestatio
     <button class="mdn-anno-btn"><b class="less-than-two-engines-flag" title="This feature is in less than two current engines.">⚠</b><span>MDN</span></button>
     <div class="feature">
      <p><a href="https://developer.mozilla.org/en-US/docs/Web/API/AuthenticatorAttestationResponse/getTransports" title="getTransports() is a method of the AuthenticatorAttestationResponse interface that returns an Array containing strings describing the different transports which may be used by the authenticator.">AuthenticatorAttestationResponse/getTransports</a></p>
-     <p class="less-than-two-engines-text">In no current engines.</p>
+     <p class="less-than-two-engines-text">In only one current engine.</p>
      <div class="support">
-      <span class="firefox no"><span>Firefox</span><span>None</span></span><span class="safari no"><span>Safari</span><span>None</span></span><span class="chrome no"><span>Chrome</span><span>None</span></span>
+      <span class="firefox no"><span>Firefox</span><span>None</span></span><span class="safari no"><span>Safari</span><span>None</span></span><span class="chrome yes"><span>Chrome</span><span>74+</span></span>
       <hr>
-      <span class="opera no"><span>Opera</span><span>None</span></span><span class="edge_blink no"><span>Edge</span><span>None</span></span>
+      <span class="opera no"><span>Opera</span><span>None</span></span><span class="edge_blink yes"><span>Edge</span><span>79+</span></span>
       <hr>
       <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
       <hr>
-      <span class="firefox_android no"><span>Firefox for Android</span><span>None</span></span><span class="safari_ios no"><span>iOS Safari</span><span>None</span></span><span class="chrome_android no"><span>Chrome for Android</span><span>None</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
+      <span class="firefox_android no"><span>Firefox for Android</span><span>None</span></span><span class="safari_ios no"><span>iOS Safari</span><span>None</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>74+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android yes"><span>Samsung Internet</span><span>11.0+</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
      </div>
     </div>
    </div>
@@ -2726,7 +2733,7 @@ <h4 class="heading settled" data-level="5.2.1" id="iface-authenticatorattestatio
          <hr>
          <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
          <hr>
-         <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android yes"><span>Android WebView</span><span>70+</span></span><span class="samsunginternet_android yes"><span>Samsung Internet</span><span>10.0+</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
+         <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android yes"><span>Samsung Internet</span><span>10.0+</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
         </div>
        </div>
       </div>
@@ -2783,7 +2790,7 @@ <h4 class="heading settled" data-level="5.2.2" id="iface-authenticatorassertionr
       <hr>
       <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
       <hr>
-      <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android yes"><span>Android WebView</span><span>70+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
+      <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
      </div>
     </div>
    </div>
@@ -2818,7 +2825,7 @@ <h4 class="heading settled" data-level="5.2.2" id="iface-authenticatorassertionr
          <hr>
          <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
          <hr>
-         <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android yes"><span>Android WebView</span><span>70+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
+         <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
         </div>
        </div>
       </div>
@@ -2838,7 +2845,7 @@ <h4 class="heading settled" data-level="5.2.2" id="iface-authenticatorassertionr
          <hr>
          <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
          <hr>
-         <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android yes"><span>Android WebView</span><span>70+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
+         <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
         </div>
        </div>
       </div>
@@ -2858,7 +2865,7 @@ <h4 class="heading settled" data-level="5.2.2" id="iface-authenticatorassertionr
          <hr>
          <span class="edge yes"><span>Edge (Legacy)</span><span>18</span></span><span class="ie no"><span>IE</span><span>None</span></span>
          <hr>
-         <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android yes"><span>Android WebView</span><span>70+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
+         <span class="firefox_android yes"><span>Firefox for Android</span><span>60+</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>70+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android no"><span>Opera Mobile</span><span>None</span></span>
         </div>
        </div>
       </div>
@@ -2900,7 +2907,7 @@ <h3 class="heading settled" data-level="5.4" id="dictionary-makecredentialoption
       <hr>
       <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
       <hr>
-      <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+      <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
      </div>
     </div>
    </div>
@@ -2933,7 +2940,7 @@ <h3 class="heading settled" data-level="5.4" id="dictionary-makecredentialoption
          <hr>
          <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
          <hr>
-         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
         </div>
        </div>
       </div>
@@ -2958,7 +2965,7 @@ <h3 class="heading settled" data-level="5.4" id="dictionary-makecredentialoption
          <hr>
          <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
          <hr>
-         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
         </div>
        </div>
       </div>
@@ -2979,7 +2986,7 @@ <h3 class="heading settled" data-level="5.4" id="dictionary-makecredentialoption
          <hr>
          <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
          <hr>
-         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
         </div>
        </div>
       </div>
@@ -3000,7 +3007,7 @@ <h3 class="heading settled" data-level="5.4" id="dictionary-makecredentialoption
          <hr>
          <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
          <hr>
-         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
         </div>
        </div>
       </div>
@@ -3022,7 +3029,7 @@ <h3 class="heading settled" data-level="5.4" id="dictionary-makecredentialoption
          <hr>
          <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
          <hr>
-         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
         </div>
        </div>
       </div>
@@ -3043,7 +3050,7 @@ <h3 class="heading settled" data-level="5.4" id="dictionary-makecredentialoption
          <hr>
          <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
          <hr>
-         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
         </div>
        </div>
       </div>
@@ -3065,7 +3072,7 @@ <h3 class="heading settled" data-level="5.4" id="dictionary-makecredentialoption
          <hr>
          <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
          <hr>
-         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
         </div>
        </div>
       </div>
@@ -3086,7 +3093,7 @@ <h3 class="heading settled" data-level="5.4" id="dictionary-makecredentialoption
          <hr>
          <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
          <hr>
-         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
         </div>
        </div>
       </div>
@@ -3095,7 +3102,24 @@ <h3 class="heading settled" data-level="5.4" id="dictionary-makecredentialoption
       <p>This member is intended for use by <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⓪①">Relying Parties</a> that wish to express their preference for <a data-link-type="dfn" href="#attestation-conveyance" id="ref-for-attestation-conveyance①">attestation conveyance</a>.
 Its values SHOULD be members of <code class="idl"><a data-link-type="idl" href="#enumdef-attestationconveyancepreference" id="ref-for-enumdef-attestationconveyancepreference④">AttestationConveyancePreference</a></code>. <a data-link-type="dfn" href="#client-platform" id="ref-for-client-platform②⑦">Client platforms</a> MUST ignore unknown values, treating an unknown value as if the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-exists" id="ref-for-map-exists">member does not exist</a>.
 Its default value is "none".</p>
-     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredentialCreationOptions" data-dfn-type="dict-member" data-export id="dom-publickeycredentialcreationoptions-extensions"><code>extensions</code></dfn>, <span> of type <a data-link-type="idl-name" href="#dictdef-authenticationextensionsclientinputs" id="ref-for-dictdef-authenticationextensionsclientinputs①">AuthenticationExtensionsClientInputs</a></span>
+     <dt data-md>
+      <div class="mdn-anno wrapped">
+       <button class="mdn-anno-btn"><b class="all-engines-flag" title="This feature is in all current engines.">✔</b><span>MDN</span></button>
+       <div class="feature">
+        <p><a href="https://developer.mozilla.org/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/extensions" title="extensions, an optional property of the PublicKeyCredentialCreationOptions dictionary, is an object providing the client extensions and their input values.">PublicKeyCredentialCreationOptions/extensions</a></p>
+        <p class="all-engines-text">In all current engines.</p>
+        <div class="support">
+         <span class="firefox yes"><span>Firefox</span><span>60+</span></span><span class="safari yes"><span>Safari</span><span>13+</span></span><span class="chrome yes"><span>Chrome</span><span>67+</span></span>
+         <hr>
+         <span class="opera yes"><span>Opera</span><span>54+</span></span><span class="edge_blink yes"><span>Edge</span><span>79+</span></span>
+         <hr>
+         <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
+         <hr>
+         <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+        </div>
+       </div>
+      </div>
+      <p><dfn class="dfn-paneled idl-code" data-dfn-for="PublicKeyCredentialCreationOptions" data-dfn-type="dict-member" data-export id="dom-publickeycredentialcreationoptions-extensions"><code>extensions</code></dfn>, <span> of type <a data-link-type="idl-name" href="#dictdef-authenticationextensionsclientinputs" id="ref-for-dictdef-authenticationextensionsclientinputs①">AuthenticationExtensionsClientInputs</a></span></p>
      <dd data-md>
       <p>This member contains additional parameters requesting additional processing by the client and authenticator. For
 example, the caller may request that only authenticators with certain capabilities be used to create the credential, or
@@ -3331,7 +3355,7 @@ <h3 class="heading settled" data-level="5.5" id="dictionary-assertion-options"><
       <hr>
       <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
       <hr>
-      <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android yes"><span>Android WebView</span><span>67+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+      <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android yes"><span>Android WebView</span><span>67+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
      </div>
     </div>
    </div>
@@ -3360,7 +3384,7 @@ <h3 class="heading settled" data-level="5.5" id="dictionary-assertion-options"><
         <hr>
         <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
         <hr>
-        <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android yes"><span>Android WebView</span><span>67+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+        <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android yes"><span>Android WebView</span><span>67+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
        </div>
       </div>
      </div>
@@ -3380,7 +3404,7 @@ <h3 class="heading settled" data-level="5.5" id="dictionary-assertion-options"><
         <hr>
         <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
         <hr>
-        <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android yes"><span>Android WebView</span><span>67+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+        <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android yes"><span>Android WebView</span><span>67+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
        </div>
       </div>
      </div>
@@ -3401,7 +3425,7 @@ <h3 class="heading settled" data-level="5.5" id="dictionary-assertion-options"><
         <hr>
         <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
         <hr>
-        <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android yes"><span>Android WebView</span><span>67+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+        <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android yes"><span>Android WebView</span><span>67+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
        </div>
       </div>
      </div>
@@ -3422,7 +3446,7 @@ <h3 class="heading settled" data-level="5.5" id="dictionary-assertion-options"><
         <hr>
         <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
         <hr>
-        <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android yes"><span>Android WebView</span><span>67+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+        <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android yes"><span>Android WebView</span><span>67+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
        </div>
       </div>
      </div>
@@ -3443,7 +3467,7 @@ <h3 class="heading settled" data-level="5.5" id="dictionary-assertion-options"><
         <hr>
         <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
         <hr>
-        <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android yes"><span>Android WebView</span><span>67+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+        <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android yes"><span>Android WebView</span><span>67+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
        </div>
       </div>
      </div>
@@ -3453,19 +3477,6 @@ <h3 class="heading settled" data-level="5.5" id="dictionary-assertion-options"><
     <dt data-md>
      <div class="mdn-anno wrapped">
       <button class="mdn-anno-btn"><b class="all-engines-flag" title="This feature is in all current engines.">✔</b><span>MDN</span></button>
-      <div class="feature">
-       <p><a href="https://developer.mozilla.org/en-US/docs/Web/API/PublicKeyCredentialCreationOptions/extensions" title="extensions, an optional property of the PublicKeyCredentialCreationOptions dictionary, is an object providing the client extensions and their input values.">PublicKeyCredentialCreationOptions/extensions</a></p>
-       <p class="all-engines-text">In all current engines.</p>
-       <div class="support">
-        <span class="firefox yes"><span>Firefox</span><span>60+</span></span><span class="safari yes"><span>Safari</span><span>13+</span></span><span class="chrome yes"><span>Chrome</span><span>67+</span></span>
-        <hr>
-        <span class="opera yes"><span>Opera</span><span>54+</span></span><span class="edge_blink yes"><span>Edge</span><span>79+</span></span>
-        <hr>
-        <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
-        <hr>
-        <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android no"><span>Android WebView</span><span>None</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
-       </div>
-      </div>
       <div class="feature">
        <p><a href="https://developer.mozilla.org/en-US/docs/Web/API/PublicKeyCredentialRequestOptions/extensions" title="extensions, an optional property of the PublicKeyCredentialRequestOptions dictionary, is an object providing the client extensions and their input values.">PublicKeyCredentialRequestOptions/extensions</a></p>
        <p class="all-engines-text">In all current engines.</p>
@@ -3476,7 +3487,7 @@ <h3 class="heading settled" data-level="5.5" id="dictionary-assertion-options"><
         <hr>
         <span class="edge no"><span>Edge (Legacy)</span><span>None</span></span><span class="ie no"><span>IE</span><span>None</span></span>
         <hr>
-        <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13.3+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android yes"><span>Android WebView</span><span>67+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
+        <span class="firefox_android no"><span>Firefox for Android</span><span>?</span></span><span class="safari_ios yes"><span>iOS Safari</span><span>13+</span></span><span class="chrome_android yes"><span>Chrome for Android</span><span>67+</span></span><span class="webview_android yes"><span>Android WebView</span><span>67+</span></span><span class="samsunginternet_android no"><span>Samsung Internet</span><span>None</span></span><span class="opera_android yes"><span>Opera Mobile</span><span>48+</span></span>
        </div>
       </div>
      </div>
@@ -3882,7 +3893,7 @@ <h3 class="heading settled" data-level="5.9" id="sctn-permissions-policy"><span
    <div class="mdn-anno wrapped after">
     <button class="mdn-anno-btn"><b class="less-than-two-engines-flag" title="This feature is in less than two current engines.">⚠</b><span>MDN</span></button>
     <div class="feature">
-     <p><a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy/publickey-credentials-get" title="The HTTP Feature-Policy header publickey-credentials-get directive controls whether the current document is allowed to access Web Authentcation API to create new public-key credentials, i.e, via navigator.credentials.get({publicKey: ..., ...}).">Headers/Feature-Policy/publickey-credentials-get</a></p>
+     <p><a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy/publickey-credentials-get" title="The HTTP Feature-Policy header publickey-credentials-get directive controls whether the current document is allowed to access the Web Authentication API to retrieve public-key credentials; i.e, via navigator.credentials.get({publicKey: ..., ...}).">Headers/Feature-Policy/publickey-credentials-get</a></p>
      <p class="less-than-two-engines-text">In only one current engine.</p>
      <div class="support">
       <span class="firefox no"><span>Firefox</span><span>None</span></span><span class="safari no"><span>Safari</span><span>None</span></span><span class="chrome yes"><span>Chrome</span><span>84+</span></span>
@@ -4034,7 +4045,7 @@ <h3 class="heading settled" data-level="6.1" id="sctn-authenticator-data"><span
       <tr>
        <td><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="signcount">signCount</dfn>
        <td>4
-       <td><a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter">Signature counter</a>, 32-bit unsigned big-endian integer.
+       <td><a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①">Signature counter</a>, 32-bit unsigned big-endian integer.
       <tr>
        <td><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="attestedcredentialdata">attestedCredentialData</dfn>
        <td>variable (if present)
@@ -4084,19 +4095,19 @@ <h3 class="heading settled" data-level="6.1" id="sctn-authenticator-data"><span
     <p>Determining <a data-link-type="dfn" href="#attested-credential-data" id="ref-for-attested-credential-data⑦">attested credential data</a>'s length, which is variable, involves determining <code><a data-link-type="dfn" href="#credentialpublickey" id="ref-for-credentialpublickey②">credentialPublicKey</a></code>’s beginning location given the preceding <code><a data-link-type="dfn" href="#credentialid" id="ref-for-credentialid②">credentialId</a></code>’s <a data-link-type="dfn" href="#credentialidlength" id="ref-for-credentialidlength①">length</a>, and then determining the <code><a data-link-type="dfn" href="#credentialpublickey" id="ref-for-credentialpublickey③">credentialPublicKey</a></code>’s length (see also <a data-link-type="dfn" href="https://tools.ietf.org/html/rfc8152#section-7" id="ref-for-section-7①">Section 7</a> of <a data-link-type="biblio" href="#biblio-rfc8152">[RFC8152]</a>).</p>
    </div>
    <h4 class="heading settled" data-level="6.1.1" id="sctn-sign-counter"><span class="secno">6.1.1. </span><span class="content"><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="signature-counter">Signature Counter</dfn> Considerations</span><a class="self-link" href="#sctn-sign-counter"></a></h4>
-   <p>Authenticators SHOULD implement a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①">signature counter</a> feature. These counters are conceptually stored for each credential
-by the authenticator, or globally for the authenticator as a whole. The initial value of a credential’s <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②">signature counter</a> is specified in the <code><a data-link-type="dfn" href="#signcount" id="ref-for-signcount">signCount</a></code> value of the <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data②⑤">authenticator data</a> returned by <a data-link-type="dfn" href="#authenticatormakecredential" id="ref-for-authenticatormakecredential①⓪">authenticatorMakeCredential</a>. The <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter③">signature counter</a> is incremented for each successful <a data-link-type="dfn" href="#authenticatorgetassertion" id="ref-for-authenticatorgetassertion⑨">authenticatorGetAssertion</a> operation by some positive value, and subsequent values are returned to the <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party②④">WebAuthn Relying Party</a> within the <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data②⑥">authenticator data</a> again. The <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter④">signature counter</a>'s purpose is to aid <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⑤③">Relying Parties</a> in detecting cloned authenticators. Clone
+   <p>Authenticators SHOULD implement a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②">signature counter</a> feature. These counters are conceptually stored for each credential
+by the authenticator, or globally for the authenticator as a whole. The initial value of a credential’s <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter③">signature counter</a> is specified in the <code><a data-link-type="dfn" href="#signcount" id="ref-for-signcount">signCount</a></code> value of the <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data②⑤">authenticator data</a> returned by <a data-link-type="dfn" href="#authenticatormakecredential" id="ref-for-authenticatormakecredential①⓪">authenticatorMakeCredential</a>. The <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter④">signature counter</a> is incremented for each successful <a data-link-type="dfn" href="#authenticatorgetassertion" id="ref-for-authenticatorgetassertion⑨">authenticatorGetAssertion</a> operation by some positive value, and subsequent values are returned to the <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party②④">WebAuthn Relying Party</a> within the <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data②⑥">authenticator data</a> again. The <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter⑤">signature counter</a>'s purpose is to aid <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⑤③">Relying Parties</a> in detecting cloned authenticators. Clone
 detection is more important for authenticators with limited protection measures.</p>
-   <p>A <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⑤④">Relying Party</a> stores the <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter⑤">signature counter</a> of the most recent <a data-link-type="dfn" href="#authenticatorgetassertion" id="ref-for-authenticatorgetassertion①⓪">authenticatorGetAssertion</a> operation. (Or the counter from the <a data-link-type="dfn" href="#authenticatormakecredential" id="ref-for-authenticatormakecredential①①">authenticatorMakeCredential</a> operation if no <a data-link-type="dfn" href="#authenticatorgetassertion" id="ref-for-authenticatorgetassertion①①">authenticatorGetAssertion</a> has ever been performed on a credential.) In subsequent <a data-link-type="dfn" href="#authenticatorgetassertion" id="ref-for-authenticatorgetassertion①②">authenticatorGetAssertion</a> operations, the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⑤⑤">Relying Party</a> compares the stored <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter⑥">signature counter</a> value with the new <code><a data-link-type="dfn" href="#signcount" id="ref-for-signcount①">signCount</a></code> value returned in the assertion’s <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data②⑦">authenticator data</a>.  If either is non-zero, and the new <code><a data-link-type="dfn" href="#signcount" id="ref-for-signcount②">signCount</a></code> value is less than or equal to the stored value, a cloned authenticator may exist, or the authenticator may be malfunctioning.</p>
-   <p>Detecting a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter⑦">signature counter</a> mismatch does not indicate whether the current operation was performed by a cloned authenticator or the original authenticator. <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⑤⑥">Relying Parties</a> should address this situation appropriately relative to their individual situations, i.e., their risk tolerance.</p>
+   <p>A <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⑤④">Relying Party</a> stores the <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter⑥">signature counter</a> of the most recent <a data-link-type="dfn" href="#authenticatorgetassertion" id="ref-for-authenticatorgetassertion①⓪">authenticatorGetAssertion</a> operation. (Or the counter from the <a data-link-type="dfn" href="#authenticatormakecredential" id="ref-for-authenticatormakecredential①①">authenticatorMakeCredential</a> operation if no <a data-link-type="dfn" href="#authenticatorgetassertion" id="ref-for-authenticatorgetassertion①①">authenticatorGetAssertion</a> has ever been performed on a credential.) In subsequent <a data-link-type="dfn" href="#authenticatorgetassertion" id="ref-for-authenticatorgetassertion①②">authenticatorGetAssertion</a> operations, the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⑤⑤">Relying Party</a> compares the stored <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter⑦">signature counter</a> value with the new <code><a data-link-type="dfn" href="#signcount" id="ref-for-signcount①">signCount</a></code> value returned in the assertion’s <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data②⑦">authenticator data</a>.  If either is non-zero, and the new <code><a data-link-type="dfn" href="#signcount" id="ref-for-signcount②">signCount</a></code> value is less than or equal to the stored value, a cloned authenticator may exist, or the authenticator may be malfunctioning.</p>
+   <p>Detecting a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter⑧">signature counter</a> mismatch does not indicate whether the current operation was performed by a cloned authenticator or the original authenticator. <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⑤⑥">Relying Parties</a> should address this situation appropriately relative to their individual situations, i.e., their risk tolerance.</p>
    <p>Authenticators:</p>
    <ul>
     <li data-md>
-     <p>SHOULD implement per credential <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter⑧">signature counters</a>.  This prevents the <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter⑨">signature counter</a> value from being shared between <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⑤⑦">Relying Parties</a> and being possibly employed
-as a correlation handle for the user. Authenticators may implement a global <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①⓪">signature counter</a>,
+     <p>SHOULD implement per credential <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter⑨">signature counters</a>.  This prevents the <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①⓪">signature counter</a> value from being shared between <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party①⑤⑦">Relying Parties</a> and being possibly employed
+as a correlation handle for the user. Authenticators may implement a global <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①①">signature counter</a>,
 i.e., on a per-authenticator basis, but this is less privacy-friendly for users.</p>
     <li data-md>
-     <p>SHOULD ensure that the <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①①">signature counter</a> value does not
+     <p>SHOULD ensure that the <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①②">signature counter</a> value does not
 accidentally decrease  (e.g., due to hardware failures).</p>
    </ul>
    <h4 class="heading settled" data-level="6.1.2" id="sctn-fido-u2f-sig-format-compat"><span class="secno">6.1.2. </span><span class="content">FIDO U2F Signature Format Compatibility</span><a class="self-link" href="#sctn-fido-u2f-sig-format-compat"></a></h4>
@@ -4430,16 +4441,16 @@ <h4 class="heading settled" data-level="6.3.2" id="sctn-op-make-cred"><span clas
      <dl class="switch">
       <dt data-md>is a U2F device
       <dd data-md>
-       <p>let the <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①②">signature counter</a> value for the new credential be zero. (U2F devices may support signature counters but do not return a counter when making a credential. See <a data-link-type="biblio" href="#biblio-fido-u2f-message-formats">[FIDO-U2F-Message-Formats]</a>.)</p>
-      <dt data-md>supports a global <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①③">signature counter</a>
+       <p>let the <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①③">signature counter</a> value for the new credential be zero. (U2F devices may support signature counters but do not return a counter when making a credential. See <a data-link-type="biblio" href="#biblio-fido-u2f-message-formats">[FIDO-U2F-Message-Formats]</a>.)</p>
+      <dt data-md>supports a global <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①④">signature counter</a>
       <dd data-md>
-       <p>Use the global <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①④">signature counter</a>'s actual value when generating <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data③①">authenticator data</a>.</p>
-      <dt data-md>supports a per credential <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①⑤">signature counter</a>
+       <p>Use the global <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①⑤">signature counter</a>'s actual value when generating <a data-link-type="dfn" href="#authenticator-data" id="ref-for-authenticator-data③①">authenticator data</a>.</p>
+      <dt data-md>supports a per credential <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①⑥">signature counter</a>
       <dd data-md>
        <p>allocate the counter, associate it with the new credential, and initialize the counter value as zero.</p>
-      <dt data-md>does not support a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①⑥">signature counter</a>
+      <dt data-md>does not support a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①⑦">signature counter</a>
       <dd data-md>
-       <p>let the <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①⑦">signature counter</a> value for the new credential be constant at zero.</p>
+       <p>let the <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①⑧">signature counter</a> value for the new credential be constant at zero.</p>
      </dl>
     <li data-md>
      <p>Let <var>attestedCredentialData</var> be the <a data-link-type="dfn" href="#attested-credential-data" id="ref-for-attested-credential-data⑧">attested credential data</a> byte array including the <var>credentialId</var> and <var>publicKey</var>.</p>
@@ -4513,9 +4524,9 @@ <h4 class="heading settled" data-level="6.3.3" id="sctn-op-get-assertion"><span
      <p>Let <var>processedExtensions</var> be the result of <a data-link-type="dfn" href="#authenticator-extension-processing" id="ref-for-authenticator-extension-processing①">authenticator extension processing</a> <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-iterate" id="ref-for-map-iterate⑤">for each</a> supported <a data-link-type="dfn" href="#extension-identifier" id="ref-for-extension-identifier⑦">extension
 identifier</a> → <a data-link-type="dfn" href="#authenticator-extension-input" id="ref-for-authenticator-extension-input④">authenticator extension input</a> in <var>extensions</var>.</p>
     <li data-md>
-     <p>Increment the credential associated <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①⑧">signature counter</a> or the global <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①⑨">signature counter</a> value, depending on
+     <p>Increment the credential associated <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter①⑨">signature counter</a> or the global <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②⓪">signature counter</a> value, depending on
 which approach is implemented by the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑤①">authenticator</a>, by some positive value.
-If the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑤②">authenticator</a> does not implement a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②⓪">signature counter</a>, let the <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②①">signature counter</a> value remain constant at
+If the <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator①⑤②">authenticator</a> does not implement a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②①">signature counter</a>, let the <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②②">signature counter</a> value remain constant at
 zero.</p>
     <li data-md>
      <p>Let <var>authenticatorData</var> <a data-link-type="dfn" href="#authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure" id="ref-for-authenticator-data-perform-the-following-steps-to-generate-an-authenticator-data-structure①">be the byte array</a> specified in <a href="#sctn-authenticator-data">§ 6.1 Authenticator Data</a> including <var>processedExtensions</var>, if any, as
@@ -4970,7 +4981,7 @@ <h3 class="heading settled" data-level="7.1" id="sctn-registering-a-new-credenti
       <li data-md>
        <p>Associate the user’s account with the <code><a data-link-type="dfn" href="#credentialid" id="ref-for-credentialid④">credentialId</a></code> and <code><a data-link-type="dfn" href="#credentialpublickey" id="ref-for-credentialpublickey⑥">credentialPublicKey</a></code> in <code><var>authData</var>.<a data-link-type="dfn" href="#attestedcredentialdata" id="ref-for-attestedcredentialdata⑧">attestedCredentialData</a></code>, as appropriate for the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⓪⑤">Relying Party</a>'s system.</p>
       <li data-md>
-       <p>Associate the <code><a data-link-type="dfn" href="#credentialid" id="ref-for-credentialid⑤">credentialId</a></code> with a new stored <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②②">signature counter</a> value
+       <p>Associate the <code><a data-link-type="dfn" href="#credentialid" id="ref-for-credentialid⑤">credentialId</a></code> with a new stored <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②③">signature counter</a> value
 initialized to the value of <code><var>authData</var>.<a data-link-type="dfn" href="#signcount" id="ref-for-signcount③">signCount</a></code>.</p>
      </ul>
      <p>It is RECOMMENDED to also:</p>
@@ -5073,7 +5084,7 @@ <h3 class="heading settled" data-level="7.2" id="sctn-verifying-assertion"><span
      <p>Using <var>credentialPublicKey</var>, verify that <var>sig</var> is a valid signature over the binary concatenation of <var>authData</var> and <var>hash</var>.</p>
      <p class="note" role="note"><span>Note:</span> This verification step is compatible with signatures generated by FIDO U2F authenticators. See <a href="#sctn-fido-u2f-sig-format-compat">§ 6.1.2 FIDO U2F Signature Format Compatibility</a>.</p>
     <li data-md>
-     <p>Let <var>storedSignCount</var> be the stored <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②③">signature counter</a> value associated with <code><var>credential</var>.<code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-id" id="ref-for-dom-credential-id④">id</a></code></code>.
+     <p>Let <var>storedSignCount</var> be the stored <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②④">signature counter</a> value associated with <code><var>credential</var>.<code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-id" id="ref-for-dom-credential-id④">id</a></code></code>.
 If <var>authData</var>.<code><a data-link-type="dfn" href="#signcount" id="ref-for-signcount④">signCount</a></code> is nonzero or <var>storedSignCount</var> is nonzero,
 then run the following sub-step:</p>
      <ul>
@@ -6612,7 +6623,7 @@ <h3 class="heading settled" data-level="11.5" id="sctn-automation-add-credential
        <td>string
       <tr>
        <td><var>signCount</var>
-       <td>The initial value for a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②④">signature counter</a> associated to the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source③③">public key credential source</a>.
+       <td>The initial value for a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②⑤">signature counter</a> associated to the <a data-link-type="dfn" href="#public-key-credential-source" id="ref-for-public-key-credential-source③③">public key credential source</a>.
        <td>number
       <tr>
        <td><var>largeBlob</var>
@@ -6702,7 +6713,7 @@ <h3 class="heading settled" data-level="11.5" id="sctn-automation-add-credential
        <p><var>userHandle</var></p>
      </dl>
     <li data-md>
-     <p>Associate a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②⑤">signature counter</a> <var>counter</var> to the <var>credential</var> with a starting value equal to the <var>parameters</var>’ <var>signCount</var> or <code>0</code> if <var>signCount</var> is <code>null</code>.</p>
+     <p>Associate a <a data-link-type="dfn" href="#signature-counter" id="ref-for-signature-counter②⑥">signature counter</a> <var>counter</var> to the <var>credential</var> with a starting value equal to the <var>parameters</var>’ <var>signCount</var> or <code>0</code> if <var>signCount</var> is <code>null</code>.</p>
     <li data-md>
      <p>If <var>largeBlob</var> is not <code>null</code>, set the <a data-link-type="dfn" href="https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#large-blob" id="ref-for-large-blob②">large, per-credential blob</a> associated to the <var>credential</var> to <var>largeBlob</var>.</p>
     <li data-md>
@@ -7764,12 +7775,6 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
    <li><a href="#dom-authenticationextensionslargeblobinputs-write">write</a><span>, in §10.5</span>
    <li><a href="#dom-authenticationextensionslargebloboutputs-written">written</a><span>, in §10.5</span>
   </ul>
-  <aside class="dfn-panel" data-for="term-for-section-2.1">
-   <a href="https://tools.ietf.org/html/bcp47#section-2.1">https://tools.ietf.org/html/bcp47#section-2.1</a><b>Referenced in:</b>
-   <ul>
-    <li><a href="#ref-for-section-2.1">6.4.2. Language and Direction Encoding</a> <a href="#ref-for-section-2.1①">(2)</a> <a href="#ref-for-section-2.1②">(3)</a> <a href="#ref-for-section-2.1③">(4)</a> <a href="#ref-for-section-2.1④">(5)</a>
-   </ul>
-  </aside>
   <aside class="dfn-panel" data-for="term-for-credential">
    <a href="https://w3c.github.io/webappsec-credential-management/#credential">https://w3c.github.io/webappsec-credential-management/#credential</a><b>Referenced in:</b>
    <ul>
@@ -8263,6 +8268,12 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     <li><a href="#ref-for-relevant-settings-object④">5.5. Options for Assertion Generation (dictionary PublicKeyCredentialRequestOptions)</a>
    </ul>
   </aside>
+  <aside class="dfn-panel" data-for="term-for-secure-context">
+   <a href="https://html.spec.whatwg.org/multipage/webappapis.html#secure-context">https://html.spec.whatwg.org/multipage/webappapis.html#secure-context</a><b>Referenced in:</b>
+   <ul>
+    <li><a href="#ref-for-secure-context">5. Web Authentication API</a>
+   </ul>
+  </aside>
   <aside class="dfn-panel" data-for="term-for-concept-origin-tuple">
    <a href="https://html.spec.whatwg.org/multipage/origin.html#concept-origin-tuple">https://html.spec.whatwg.org/multipage/origin.html#concept-origin-tuple</a><b>Referenced in:</b>
    <ul>
@@ -8473,6 +8484,12 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     <li><a href="#ref-for-section-4.1.2.7①">5.2.1.1. Easily accessing credential data</a> <a href="#ref-for-section-4.1.2.7②">(2)</a> <a href="#ref-for-section-4.1.2.7③">(3)</a>
    </ul>
   </aside>
+  <aside class="dfn-panel" data-for="term-for-section-2.1">
+   <a href="https://tools.ietf.org/html/bcp47#section-2.1">https://tools.ietf.org/html/bcp47#section-2.1</a><b>Referenced in:</b>
+   <ul>
+    <li><a href="#ref-for-section-2.1">6.4.2. Language and Direction Encoding</a> <a href="#ref-for-section-2.1①">(2)</a> <a href="#ref-for-section-2.1②">(3)</a> <a href="#ref-for-section-2.1③">(4)</a> <a href="#ref-for-section-2.1④">(5)</a>
+   </ul>
+  </aside>
   <aside class="dfn-panel" data-for="term-for-section-7">
    <a href="https://tools.ietf.org/html/rfc8152#section-7">https://tools.ietf.org/html/rfc8152#section-7</a><b>Referenced in:</b>
    <ul>
@@ -8536,12 +8553,6 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
     <li><a href="#ref-for-section-3.9">9.3. Extending Request Parameters</a>
    </ul>
   </aside>
-  <aside class="dfn-panel" data-for="term-for-secure-contexts">
-   <a href="https://w3c.github.io/webappsec-secure-contexts/#secure-contexts">https://w3c.github.io/webappsec-secure-contexts/#secure-contexts</a><b>Referenced in:</b>
-   <ul>
-    <li><a href="#ref-for-secure-contexts">5. Web Authentication API</a>
-   </ul>
-  </aside>
   <aside class="dfn-panel" data-for="term-for-af">
    <a href="https://pages.nist.gov/800-63-3/sp800-63-3.html#af">https://pages.nist.gov/800-63-3/sp800-63-3.html#af</a><b>Referenced in:</b>
    <ul>
@@ -9062,11 +9073,6 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
   </aside>
   <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span class="content">Terms defined by reference</span><a class="self-link" href="#index-defined-elsewhere"></a></h3>
   <ul class="index">
-   <li>
-    <a data-link-type="biblio">[BCP47]</a> defines the following terms:
-    <ul>
-     <li><span class="dfn-paneled" id="term-for-section-2.1">language tag</span>
-    </ul>
    <li>
     <a data-link-type="biblio">[CREDENTIAL-MANAGEMENT-1]</a> defines the following terms:
     <ul>
@@ -9172,6 +9178,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="term-for-concept-settings-object-origin">origin <small>(for environment settings object)</small></span>
      <li><span class="dfn-paneled" id="term-for-concept-document-permissions-policy">permissions policy</span>
      <li><span class="dfn-paneled" id="term-for-relevant-settings-object">relevant settings object</span>
+     <li><span class="dfn-paneled" id="term-for-secure-context">secure context</span>
      <li><span class="dfn-paneled" id="term-for-concept-origin-tuple">tuple origin</span>
     </ul>
    <li>
@@ -9221,6 +9228,11 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
     <ul>
      <li><span class="dfn-paneled" id="term-for-section-4.1.2.7">subjectpublickeyinfo</span>
     </ul>
+   <li>
+    <a data-link-type="biblio">[rfc5646]</a> defines the following terms:
+    <ul>
+     <li><span class="dfn-paneled" id="term-for-section-2.1">language tag</span>
+    </ul>
    <li>
     <a data-link-type="biblio">[RFC8152]</a> defines the following terms:
     <ul>
@@ -9242,11 +9254,6 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
     <ul>
      <li><span class="dfn-paneled" id="term-for-section-3.9">group sockets</span>
     </ul>
-   <li>
-    <a data-link-type="biblio">[secure-contexts]</a> defines the following terms:
-    <ul>
-     <li><span class="dfn-paneled" id="term-for-secure-contexts">secure contexts</span>
-    </ul>
    <li>
     <a data-link-type="biblio">[SP800-800-63r3]</a> defines the following terms:
     <ul>
@@ -9341,14 +9348,12 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
   <h2 class="no-num no-ref heading settled" id="references"><span class="content">References</span><a class="self-link" href="#references"></a></h2>
   <h3 class="no-num no-ref heading settled" id="normative"><span class="content">Normative References</span><a class="self-link" href="#normative"></a></h3>
   <dl>
-   <dt id="biblio-bcp47">[BCP47]
-   <dd>A. Phillips; M. Davis. <a href="https://tools.ietf.org/html/bcp47">Tags for Identifying Languages</a>. September 2009. IETF Best Current Practice. URL: <a href="https://tools.ietf.org/html/bcp47">https://tools.ietf.org/html/bcp47</a>
    <dt id="biblio-credential-management-1">[CREDENTIAL-MANAGEMENT-1]
    <dd>Mike West. <a href="https://www.w3.org/TR/credential-management-1/">Credential Management Level 1</a>. 17 January 2019. WD. URL: <a href="https://www.w3.org/TR/credential-management-1/">https://www.w3.org/TR/credential-management-1/</a>
    <dt id="biblio-dom4">[DOM4]
    <dd>Anne van Kesteren. <a href="https://dom.spec.whatwg.org/">DOM Standard</a>. Living Standard. URL: <a href="https://dom.spec.whatwg.org/">https://dom.spec.whatwg.org/</a>
    <dt id="biblio-ecmascript">[ECMAScript]
-   <dd><a href="https://tc39.es/ecma262/">ECMAScript Language Specification</a>. URL: <a href="https://tc39.es/ecma262/">https://tc39.es/ecma262/</a>
+   <dd><a href="https://tc39.es/ecma262/multipage/">ECMAScript Language Specification</a>. URL: <a href="https://tc39.es/ecma262/multipage/">https://tc39.es/ecma262/multipage/</a>
    <dt id="biblio-encoding">[ENCODING]
    <dd>Anne van Kesteren. <a href="https://encoding.spec.whatwg.org/">Encoding Standard</a>. Living Standard. URL: <a href="https://encoding.spec.whatwg.org/">https://encoding.spec.whatwg.org/</a>
    <dt id="biblio-fetch">[FETCH]
@@ -9364,7 +9369,7 @@ <h3 class="no-num no-ref heading settled" id="normative"><span class="content">N
    <dt id="biblio-fido-u2f-message-formats">[FIDO-U2F-Message-Formats]
    <dd>D. Balfanz; J. Ehrensvard; J. Lang. <a href="https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html">FIDO U2F Raw Message Formats</a>. FIDO Alliance Implementation Draft. URL: <a href="https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html">https://fidoalliance.org/specs/fido-u2f-v1.1-id-20160915/fido-u2f-raw-message-formats-v1.1-id-20160915.html</a>
    <dt id="biblio-fileapi">[FileAPI]
-   <dd>Marijn Kruisselbrink; Arun Ranganathan. <a href="https://www.w3.org/TR/FileAPI/">File API</a>. 11 September 2019. WD. URL: <a href="https://www.w3.org/TR/FileAPI/">https://www.w3.org/TR/FileAPI/</a>
+   <dd>Marijn Kruisselbrink; Arun Ranganathan. <a href="https://www.w3.org/TR/FileAPI/">File API</a>. 4 June 2021. WD. URL: <a href="https://www.w3.org/TR/FileAPI/">https://www.w3.org/TR/FileAPI/</a>
    <dt id="biblio-html">[HTML]
    <dd>Anne van Kesteren; et al. <a href="https://html.spec.whatwg.org/multipage/">HTML Standard</a>. Living Standard. URL: <a href="https://html.spec.whatwg.org/multipage/">https://html.spec.whatwg.org/multipage/</a>
    <dt id="biblio-iana-cose-algs-reg">[IANA-COSE-ALGS-REG]
@@ -9380,41 +9385,41 @@ <h3 class="no-num no-ref heading settled" id="normative"><span class="content">N
    <dt id="biblio-rfc2119">[RFC2119]
    <dd>S. Bradner. <a href="https://tools.ietf.org/html/rfc2119">Key words for use in RFCs to Indicate Requirement Levels</a>. March 1997. Best Current Practice. URL: <a href="https://tools.ietf.org/html/rfc2119">https://tools.ietf.org/html/rfc2119</a>
    <dt id="biblio-rfc3986">[RFC3986]
-   <dd>T. Berners-Lee; R. Fielding; L. Masinter. <a href="https://tools.ietf.org/html/rfc3986">Uniform Resource Identifier (URI): Generic Syntax</a>. January 2005. Internet Standard. URL: <a href="https://tools.ietf.org/html/rfc3986">https://tools.ietf.org/html/rfc3986</a>
+   <dd>T. Berners-Lee; R. Fielding; L. Masinter. <a href="https://datatracker.ietf.org/doc/html/rfc3986">Uniform Resource Identifier (URI): Generic Syntax</a>. January 2005. Internet Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc3986">https://datatracker.ietf.org/doc/html/rfc3986</a>
    <dt id="biblio-rfc4648">[RFC4648]
-   <dd>S. Josefsson. <a href="https://tools.ietf.org/html/rfc4648">The Base16, Base32, and Base64 Data Encodings</a>. October 2006. Proposed Standard. URL: <a href="https://tools.ietf.org/html/rfc4648">https://tools.ietf.org/html/rfc4648</a>
+   <dd>S. Josefsson. <a href="https://datatracker.ietf.org/doc/html/rfc4648">The Base16, Base32, and Base64 Data Encodings</a>. October 2006. Proposed Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc4648">https://datatracker.ietf.org/doc/html/rfc4648</a>
    <dt id="biblio-rfc4949">[RFC4949]
-   <dd>R. Shirey. <a href="https://tools.ietf.org/html/rfc4949">Internet Security Glossary, Version 2</a>. August 2007. Informational. URL: <a href="https://tools.ietf.org/html/rfc4949">https://tools.ietf.org/html/rfc4949</a>
+   <dd>R. Shirey. <a href="https://datatracker.ietf.org/doc/html/rfc4949">Internet Security Glossary, Version 2</a>. August 2007. Informational. URL: <a href="https://datatracker.ietf.org/doc/html/rfc4949">https://datatracker.ietf.org/doc/html/rfc4949</a>
    <dt id="biblio-rfc5234">[RFC5234]
-   <dd>D. Crocker, Ed.; P. Overell. <a href="https://tools.ietf.org/html/rfc5234">Augmented BNF for Syntax Specifications: ABNF</a>. January 2008. Internet Standard. URL: <a href="https://tools.ietf.org/html/rfc5234">https://tools.ietf.org/html/rfc5234</a>
+   <dd>D. Crocker, Ed.; P. Overell. <a href="https://datatracker.ietf.org/doc/html/rfc5234">Augmented BNF for Syntax Specifications: ABNF</a>. January 2008. Internet Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc5234">https://datatracker.ietf.org/doc/html/rfc5234</a>
    <dt id="biblio-rfc5280">[RFC5280]
-   <dd>D. Cooper; et al. <a href="https://tools.ietf.org/html/rfc5280">Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile</a>. May 2008. Proposed Standard. URL: <a href="https://tools.ietf.org/html/rfc5280">https://tools.ietf.org/html/rfc5280</a>
+   <dd>D. Cooper; et al. <a href="https://datatracker.ietf.org/doc/html/rfc5280">Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile</a>. May 2008. Proposed Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc5280">https://datatracker.ietf.org/doc/html/rfc5280</a>
+   <dt id="biblio-rfc5646">[RFC5646]
+   <dd>A. Phillips, Ed.; M. Davis, Ed.. <a href="https://datatracker.ietf.org/doc/html/rfc5646">Tags for Identifying Languages</a>. September 2009. Best Current Practice. URL: <a href="https://datatracker.ietf.org/doc/html/rfc5646">https://datatracker.ietf.org/doc/html/rfc5646</a>
    <dt id="biblio-rfc5890">[RFC5890]
-   <dd>J. Klensin. <a href="https://tools.ietf.org/html/rfc5890">Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework</a>. August 2010. Proposed Standard. URL: <a href="https://tools.ietf.org/html/rfc5890">https://tools.ietf.org/html/rfc5890</a>
+   <dd>J. Klensin. <a href="https://datatracker.ietf.org/doc/html/rfc5890">Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework</a>. August 2010. Proposed Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc5890">https://datatracker.ietf.org/doc/html/rfc5890</a>
    <dt id="biblio-rfc6454">[RFC6454]
-   <dd>A. Barth. <a href="https://tools.ietf.org/html/rfc6454">The Web Origin Concept</a>. December 2011. Proposed Standard. URL: <a href="https://tools.ietf.org/html/rfc6454">https://tools.ietf.org/html/rfc6454</a>
+   <dd>A. Barth. <a href="https://datatracker.ietf.org/doc/html/rfc6454">The Web Origin Concept</a>. December 2011. Proposed Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc6454">https://datatracker.ietf.org/doc/html/rfc6454</a>
    <dt id="biblio-rfc7515">[RFC7515]
-   <dd>M. Jones; J. Bradley; N. Sakimura. <a href="https://tools.ietf.org/html/rfc7515">JSON Web Signature (JWS)</a>. May 2015. Proposed Standard. URL: <a href="https://tools.ietf.org/html/rfc7515">https://tools.ietf.org/html/rfc7515</a>
+   <dd>M. Jones; J. Bradley; N. Sakimura. <a href="https://datatracker.ietf.org/doc/html/rfc7515">JSON Web Signature (JWS)</a>. May 2015. Proposed Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc7515">https://datatracker.ietf.org/doc/html/rfc7515</a>
    <dt id="biblio-rfc8152">[RFC8152]
-   <dd>J. Schaad. <a href="https://tools.ietf.org/html/rfc8152">CBOR Object Signing and Encryption (COSE)</a>. July 2017. Proposed Standard. URL: <a href="https://tools.ietf.org/html/rfc8152">https://tools.ietf.org/html/rfc8152</a>
+   <dd>J. Schaad. <a href="https://datatracker.ietf.org/doc/html/rfc8152">CBOR Object Signing and Encryption (COSE)</a>. July 2017. Proposed Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc8152">https://datatracker.ietf.org/doc/html/rfc8152</a>
    <dt id="biblio-rfc8230">[RFC8230]
-   <dd>M. Jones. <a href="https://tools.ietf.org/html/rfc8230">Using RSA Algorithms with CBOR Object Signing and Encryption (COSE) Messages</a>. September 2017. Proposed Standard. URL: <a href="https://tools.ietf.org/html/rfc8230">https://tools.ietf.org/html/rfc8230</a>
+   <dd>M. Jones. <a href="https://datatracker.ietf.org/doc/html/rfc8230">Using RSA Algorithms with CBOR Object Signing and Encryption (COSE) Messages</a>. September 2017. Proposed Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc8230">https://datatracker.ietf.org/doc/html/rfc8230</a>
    <dt id="biblio-rfc8264">[RFC8264]
-   <dd>P. Saint-Andre; M. Blanchet. <a href="https://tools.ietf.org/html/rfc8264">PRECIS Framework: Preparation, Enforcement, and Comparison of Internationalized Strings in Application Protocols</a>. October 2017. Proposed Standard. URL: <a href="https://tools.ietf.org/html/rfc8264">https://tools.ietf.org/html/rfc8264</a>
+   <dd>P. Saint-Andre; M. Blanchet. <a href="https://datatracker.ietf.org/doc/html/rfc8264">PRECIS Framework: Preparation, Enforcement, and Comparison of Internationalized Strings in Application Protocols</a>. October 2017. Proposed Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc8264">https://datatracker.ietf.org/doc/html/rfc8264</a>
    <dt id="biblio-rfc8265">[RFC8265]
-   <dd>P. Saint-Andre; A. Melnikov. <a href="https://tools.ietf.org/html/rfc8265">Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords</a>. October 2017. Proposed Standard. URL: <a href="https://tools.ietf.org/html/rfc8265">https://tools.ietf.org/html/rfc8265</a>
+   <dd>P. Saint-Andre; A. Melnikov. <a href="https://datatracker.ietf.org/doc/html/rfc8265">Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords</a>. October 2017. Proposed Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc8265">https://datatracker.ietf.org/doc/html/rfc8265</a>
    <dt id="biblio-rfc8266">[RFC8266]
-   <dd>P. Saint-Andre. <a href="https://tools.ietf.org/html/rfc8266">Preparation, Enforcement, and Comparison of Internationalized Strings Representing Nicknames</a>. October 2017. Proposed Standard. URL: <a href="https://tools.ietf.org/html/rfc8266">https://tools.ietf.org/html/rfc8266</a>
+   <dd>P. Saint-Andre. <a href="https://datatracker.ietf.org/doc/html/rfc8266">Preparation, Enforcement, and Comparison of Internationalized Strings Representing Nicknames</a>. October 2017. Proposed Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc8266">https://datatracker.ietf.org/doc/html/rfc8266</a>
    <dt id="biblio-rfc8610">[RFC8610]
    <dd>H. Birkholz; C. Vigano; C. Bormann. <a href="https://tools.ietf.org/html/rfc8610">Concise Data Definition Language (CDDL): A Notational Convention to Express Concise Binary Object Representation (CBOR) and JSON Data Structures</a>. June 2019. IETF Proposed Standard. URL: <a href="https://tools.ietf.org/html/rfc8610">https://tools.ietf.org/html/rfc8610</a>
    <dt id="biblio-rfc8809">[RFC8809]
    <dd>Jeff Hodges; Giridhar Mandyam; Michael B. Jones. <a href="https://www.rfc-editor.org/rfc/rfc8809">Registries for Web Authentication (WebAuthn)</a>. August 2020. IETF Proposed Standard. URL: <a href="https://www.rfc-editor.org/rfc/rfc8809">https://www.rfc-editor.org/rfc/rfc8809</a>
    <dt id="biblio-rfc8949">[RFC8949]
-   <dd>C. Bormann; P. Hoffman. <a href="https://tools.ietf.org/html/rfc8949">Concise Binary Object Representation (CBOR)</a>. December 2020. Internet Standard. URL: <a href="https://tools.ietf.org/html/rfc8949">https://tools.ietf.org/html/rfc8949</a>
+   <dd>C. Bormann; P. Hoffman. <a href="https://datatracker.ietf.org/doc/html/rfc8949">Concise Binary Object Representation (CBOR)</a>. December 2020. Internet Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc8949">https://datatracker.ietf.org/doc/html/rfc8949</a>
    <dt id="biblio-sec1">[SEC1]
    <dd><a href="http://www.secg.org/sec1-v2.pdf">SEC1: Elliptic Curve Cryptography, Version 2.0</a>. URL: <a href="http://www.secg.org/sec1-v2.pdf">http://www.secg.org/sec1-v2.pdf</a>
-   <dt id="biblio-secure-contexts">[SECURE-CONTEXTS]
-   <dd>Mike West. <a href="https://www.w3.org/TR/secure-contexts/">Secure Contexts</a>. 15 September 2016. CR. URL: <a href="https://www.w3.org/TR/secure-contexts/">https://www.w3.org/TR/secure-contexts/</a>
    <dt id="biblio-sp800-800-63r3">[SP800-800-63r3]
    <dd>Paul A. Grassi; Michael E. Garcia; James L. Fenton. <a href="https://pages.nist.gov/800-63-3/sp800-63-3.html">NIST Special Publication 800-63: Digital Identity Guidelines</a>. June 2017. URL: <a href="https://pages.nist.gov/800-63-3/sp800-63-3.html">https://pages.nist.gov/800-63-3/sp800-63-3.html</a>
    <dt id="biblio-tcg-cmcprofile-aikcertenroll">[TCG-CMCProfile-AIKCertEnroll]
@@ -9463,13 +9468,13 @@ <h3 class="no-num no-ref heading settled" id="informative"><span class="content"
    <dt id="biblio-isobiometricvocabulary">[ISOBiometricVocabulary]
    <dd>ISO/IEC JTC1/SC37. <a href="http://standards.iso.org/ittf/PubliclyAvailableStandards/c055194_ISOIEC_2382-37_2012.zip">Information technology — Vocabulary — Biometrics</a>. 15 December 2012. International Standard: ISO/IEC 2382-37:2012(E) First Edition. URL: <a href="http://standards.iso.org/ittf/PubliclyAvailableStandards/c055194_ISOIEC_2382-37_2012.zip">http://standards.iso.org/ittf/PubliclyAvailableStandards/c055194_ISOIEC_2382-37_2012.zip</a>
    <dt id="biblio-rfc3279">[RFC3279]
-   <dd>L. Bassham; W. Polk; R. Housley. <a href="https://tools.ietf.org/html/rfc3279">Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile</a>. April 2002. Proposed Standard. URL: <a href="https://tools.ietf.org/html/rfc3279">https://tools.ietf.org/html/rfc3279</a>
+   <dd>L. Bassham; W. Polk; R. Housley. <a href="https://datatracker.ietf.org/doc/html/rfc3279">Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile</a>. April 2002. Proposed Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc3279">https://datatracker.ietf.org/doc/html/rfc3279</a>
    <dt id="biblio-rfc5958">[RFC5958]
-   <dd>S. Turner. <a href="https://tools.ietf.org/html/rfc5958">Asymmetric Key Packages</a>. August 2010. Proposed Standard. URL: <a href="https://tools.ietf.org/html/rfc5958">https://tools.ietf.org/html/rfc5958</a>
+   <dd>S. Turner. <a href="https://datatracker.ietf.org/doc/html/rfc5958">Asymmetric Key Packages</a>. August 2010. Proposed Standard. URL: <a href="https://datatracker.ietf.org/doc/html/rfc5958">https://datatracker.ietf.org/doc/html/rfc5958</a>
    <dt id="biblio-rfc6265">[RFC6265]
    <dd>A. Barth. <a href="https://httpwg.org/specs/rfc6265.html">HTTP State Management Mechanism</a>. April 2011. Proposed Standard. URL: <a href="https://httpwg.org/specs/rfc6265.html">https://httpwg.org/specs/rfc6265.html</a>
    <dt id="biblio-rfc8017">[RFC8017]
-   <dd>K. Moriarty, Ed.; et al. <a href="https://tools.ietf.org/html/rfc8017">PKCS #1: RSA Cryptography Specifications Version 2.2</a>. November 2016. Informational. URL: <a href="https://tools.ietf.org/html/rfc8017">https://tools.ietf.org/html/rfc8017</a>
+   <dd>K. Moriarty, Ed.; et al. <a href="https://datatracker.ietf.org/doc/html/rfc8017">PKCS #1: RSA Cryptography Specifications Version 2.2</a>. November 2016. Informational. URL: <a href="https://datatracker.ietf.org/doc/html/rfc8017">https://datatracker.ietf.org/doc/html/rfc8017</a>
    <dt id="biblio-uafprotocol">[UAFProtocol]
    <dd>R. Lindemann; et al. <a href="https://fidoalliance.org/specs/fido-uaf-v1.0-ps-20141208/fido-uaf-protocol-v1.0-ps-20141208.html">FIDO UAF Protocol Specification v1.0</a>. FIDO Alliance Proposed Standard. URL: <a href="https://fidoalliance.org/specs/fido-uaf-v1.0-ps-20141208/fido-uaf-protocol-v1.0-ps-20141208.html">https://fidoalliance.org/specs/fido-uaf-v1.0-ps-20141208/fido-uaf-protocol-v1.0-ps-20141208.html</a>
    <dt id="biblio-webauthn-1">[WebAuthn-1]
@@ -11989,13 +11994,14 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
   <aside class="dfn-panel" data-for="signature-counter">
    <b><a href="#signature-counter">#signature-counter</a></b><b>Referenced in:</b>
    <ul>
-    <li><a href="#ref-for-signature-counter">6.1. Authenticator Data</a>
-    <li><a href="#ref-for-signature-counter①">6.1.1. Signature Counter Considerations</a> <a href="#ref-for-signature-counter②">(2)</a> <a href="#ref-for-signature-counter③">(3)</a> <a href="#ref-for-signature-counter④">(4)</a> <a href="#ref-for-signature-counter⑤">(5)</a> <a href="#ref-for-signature-counter⑥">(6)</a> <a href="#ref-for-signature-counter⑦">(7)</a> <a href="#ref-for-signature-counter⑧">(8)</a> <a href="#ref-for-signature-counter⑨">(9)</a> <a href="#ref-for-signature-counter①⓪">(10)</a> <a href="#ref-for-signature-counter①①">(11)</a>
-    <li><a href="#ref-for-signature-counter①②">6.3.2. The authenticatorMakeCredential Operation</a> <a href="#ref-for-signature-counter①③">(2)</a> <a href="#ref-for-signature-counter①④">(3)</a> <a href="#ref-for-signature-counter①⑤">(4)</a> <a href="#ref-for-signature-counter①⑥">(5)</a> <a href="#ref-for-signature-counter①⑦">(6)</a>
-    <li><a href="#ref-for-signature-counter①⑧">6.3.3. The authenticatorGetAssertion Operation</a> <a href="#ref-for-signature-counter①⑨">(2)</a> <a href="#ref-for-signature-counter②⓪">(3)</a> <a href="#ref-for-signature-counter②①">(4)</a>
-    <li><a href="#ref-for-signature-counter②②">7.1. Registering a New Credential</a>
-    <li><a href="#ref-for-signature-counter②③">7.2. Verifying an Authentication Assertion</a>
-    <li><a href="#ref-for-signature-counter②④">11.5. Add Credential</a> <a href="#ref-for-signature-counter②⑤">(2)</a>
+    <li><a href="#ref-for-signature-counter">4. Terminology</a>
+    <li><a href="#ref-for-signature-counter①">6.1. Authenticator Data</a>
+    <li><a href="#ref-for-signature-counter②">6.1.1. Signature Counter Considerations</a> <a href="#ref-for-signature-counter③">(2)</a> <a href="#ref-for-signature-counter④">(3)</a> <a href="#ref-for-signature-counter⑤">(4)</a> <a href="#ref-for-signature-counter⑥">(5)</a> <a href="#ref-for-signature-counter⑦">(6)</a> <a href="#ref-for-signature-counter⑧">(7)</a> <a href="#ref-for-signature-counter⑨">(8)</a> <a href="#ref-for-signature-counter①⓪">(9)</a> <a href="#ref-for-signature-counter①①">(10)</a> <a href="#ref-for-signature-counter①②">(11)</a>
+    <li><a href="#ref-for-signature-counter①③">6.3.2. The authenticatorMakeCredential Operation</a> <a href="#ref-for-signature-counter①④">(2)</a> <a href="#ref-for-signature-counter①⑤">(3)</a> <a href="#ref-for-signature-counter①⑥">(4)</a> <a href="#ref-for-signature-counter①⑦">(5)</a> <a href="#ref-for-signature-counter①⑧">(6)</a>
+    <li><a href="#ref-for-signature-counter①⑨">6.3.3. The authenticatorGetAssertion Operation</a> <a href="#ref-for-signature-counter②⓪">(2)</a> <a href="#ref-for-signature-counter②①">(3)</a> <a href="#ref-for-signature-counter②②">(4)</a>
+    <li><a href="#ref-for-signature-counter②③">7.1. Registering a New Credential</a>
+    <li><a href="#ref-for-signature-counter②④">7.2. Verifying an Authentication Assertion</a>
+    <li><a href="#ref-for-signature-counter②⑤">11.5. Add Credential</a> <a href="#ref-for-signature-counter②⑥">(2)</a>
    </ul>
   </aside>
   <aside class="dfn-panel" data-for="authenticator-type">