Reynir Björnsson

Results 143 comments of Reynir Björnsson

Thanks for the pointers @yawaramin! These are relatively new functions, but they exist in my Firefox 128 ESR so I'm happy to use them. There is [Uint8Array.prototype.toBase64()](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Uint8Array/toBase64) and [Uint8Array.fromBase64()](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Uint8Array/fromBase64), but...

Thank you for the report. Key type 3 is RSA: https://www.iana.org/assignments/cose/cose.xhtml#key-type We currently only support key type 2 (EC2, "Elliptic Curve Keys w/ x- and y-coordinate pair") https://github.com/robur-coop/webauthn/blob/22c720b2a5c018852fb718b75487da523dc2a282/src/webauthn.ml#L127 Do you...

> Webauthn is not only a standard for hardware cryptography. I assume you mean FIDO? Because this is a WebAuthn library and that's its scope. > I use it with...

I wouldn't say it's not exploitable in **all** scenarios. It's certainly not as exploitable as in 2.6! However, it would require a very specific setup using the management interface where...

The quotation seems to have been introduced here: https://github.com/ocaml/ocaml/pull/12210 Unfortunately, the CI run seems to be gone https://opam.ci.ocaml.org/github/ocaml/opam-repository/commit/de257685d52ea173da531a7bf49539af96599c9e We could use a regex in the test although I find that...

Hi! Opam doesn't require the archive (cache) to live on the same web server. Would it be an idea to split these off? E.g. have `archive-mirrors: [ "//cache.opam.ocaml.org/cache/" ]`? Perhaps...

That warning message looks like the buggy bugfix from 2.6.11 - are you sure you're running 2.6.12?

Ping @codinuum who seems to be the maintainer :-)

I'm as well unsure what to do. One way could be to re-discover the root policy on every policy operation. I'm not sure I like that approach. It would also...

I thought about that, but I'm not sure we have a guaranteed one-to-one correspondence. I mean, we may get a string that is not long enough that we can output...