Shane Weeden

Does forge support ec256 keys?

1

More of a question than an issue I guess - but tried this: PEM file of EC256 key: ``` -----BEGIN EC PRIVATE KEY----- MHcCAQEEIFB2teeHGu5T7bh597NtvJJJ/WumONRAkfOzYCP1nKEFoAoGCCqGSM49 AwEHoUQDQgAEaYys5soGb5m0vg1sgNRTw+/2WthcZO3FI1ALhu62jszNvcyipL7s /4Vx/bP11KhwnwhX9ucDyq+HtV1dmgXmig== -----END EC PRIVATE KEY-----...

I'm fairly sure its the server that returns Set-Cookie headers, to the browser.

Possibly incorrect TPM manufacturer ID string value

5

This should be confirmed by a subject matter expert (which I confess I am not), however... See: https://github.com/passwordless-lib/fido2-net-lib/blob/cb71a15c6df0e9d5230b7266502cd8bb26f656cd/Src/Fido2/AttestationFormat/Tpm.cs#L28C10-L28C21 The value for the IBM entry in TPM manufacturers is: `"id:49424d00", //...

Synchronous operation and capability discovery

4

More of a question than an issue at this point, but I'm looking to see if there is any way during session establishment to do synchronous operations after a session...

By submitting this issue you are acknowledging that any information regarding this issue will be publicly available. If you have privacy concerns, please email [[email protected]](mailto:[email protected]) ## FIRST PRE CHECK -...

Request for PQC test cases to be added to optional algorithms in server tests

3

By submitting this issue you are acknowledging that any information regarding this issue will be publicly available. If you have privacy concerns, please email [[email protected]](mailto:[email protected]) ## FIRST PRE CHECK -...

Discovery of migrated credentials

2

## Description We are starting to see real world deployments of credential exchange, allowing passkeys to be transferred or copied between passkey providers. Apple, Dashlane and Bitwarden already have offerings...