Emil Lundberg

Interesting idea, but like @sbweeden I'm skeptical of this. First, some surface-level thoughts: - [`hash_to_field` (RFC 9380)](https://www.rfc-editor.org/rfc/rfc9380.html#name-hashing-to-a-finite-field) can be used to derive an EC private key with minimal distribution bias....

> I wonder if you did not misunderstand the credential ID construction; [...] most of the credential ID is just a randomly generated salt Ah, thanks, I did indeed miss...

Ah, I see now. I think I assumed the MAC would involve the password, but indeed it does not. Here's how I understand the proposal in pseudocode: ``` password =...

Thank you for the discussion! 2024-07-17 WG call: discussion seems to be finished, closing.

See also: - #1714 - #1688 I worry that the option to disable backup/sync for _some_ credentials would confuse users, ultimately getting them locked out because they weren't aware that...

I force-pushed the branch to remove some unrelated whitespace changes from the commit history; you may need to hard-reset any local clones to the new HEAD commit.

The text looks mostly fine to me, but I wonder if we even need to comment at all on the "higher degree of variance ..." etc. To me it seems...

Yeah... sorry for procrastinating this. I have vacation coming up but I'll get started on this in early July.

Duplicate of #1862 ? Though there's new substance here, namely the concrete proposal for how this could work. See also: #1533, #1568 One comment on the proposal: how does the...

Added #1489 as fixed by this PR.