Emil Lundberg

Hi! This is a good idea, but it'll likely take some pretty significant refactoring to support. I'd been thinking the stateless design of the library would hopefully play nice with...

I agree that it's probably good to set an explicit standard for how RPs should react if `BE` changes, or if `BE=0, BS=1`, to encourage consistent behaviour between services. I'm...

> It cannot change after registration. We already have normative text about this: [...] Yes, but there is no guidance (normative or informative) on what RPs should do if they...

I agree with @timcappalli - I don't think it's the spec's role to suggest how outside regulations or certifications should judge the features of the spec. DPK is complex, yes,...

(@agl incidentally, you may use commit 107825fe as a merge-from-master into PR #1663 if you like.)

Duplicate of #1115. Length alone is necessary but far from sufficient to make a secure challenge. I'm not sure that enforcing a min/max length helps more than it hurts -...

> Sorry for taking so long Likewise, sorry for taking so long. I'll try to get back on this soon. :) > Glancing at the diff, I see a rather...

Can you try running `ykman --diagnose info`, as both root and unprivileged user? Maybe that could help determine what the problem is. On another note you could also try using...

Ah, my mistake - version 3.1.1 is way before `--diagnose` was added. Please try `ykman --log-level debug info` instead. Is there any way you can try a newer version? Also,...

Yeah, good point. I experimented a bit more with an explicit opt-in step... try it out. :slightly_smiling_face: I haven't tried it in zsh or fish, but it works pretty well...