Matthew Miller

Hey @bluetech sorry to leave you hanging for so long. Thank you for the POC PR! I wonder, would using cryptography for X.509 validation mean this project could drop `pyOpenSSL`...

Hello @WillSmartYubico, thanks for the feedback. I implemented hints support as per the spec, but I'm hearing that webauthn.io would be more useful if I _didn't_ follow the spec here....

Heya @WillSmartYubico, I've just deployed an update to https://webauthn.io that decouples authenticator attachment and hints so they can be independently set even into conflicting combinations. Take it for a spin...

From WG F2F: Possible solutions include... ### WebAuthn - New `.create()` options extension, defined in WebAuthn or Microsoft-hosted - Something hints-based, but not using existing `hints` because of hints have...

I've been convinced that this proposal enables RP's to gracefully handle more use cases than the simpler reporting mechanism proposed in #2052. I'd say let's try and get this one...

Capping a timestamp at a max value could also help with reducing fingerprinting possibilities.

> What is exact problem? Help me help you. Please provide _any_ details, there's nothing here for me to begin debugging.

Thank you, we're almost there. > Registration failed: premature end of stream (expected to read 1 bytes, got 0 instead) The full stack trace you're seeing from Python will be...

Oh, I see, this is an issue you're having with the live website. Aright, I'll see if this is enough to work with.

> Is there any update here? I was at a conference all week so I didn't have a chance to dig into this. I'll let you know how things go...