Bit set by the SPC extension should backed up as part of the Public Key Credential Source

[timcappalli]

PLACEHOLDER

Proposed Change

Bit set by the SPC extension should backed up as part of the Public Key Credential Source.

[selfissued]

This makes sense to me.

[dwaite]

Suggest altering the definition of credential source to say that extensions supplied during creation can define their own additional data, e.g.

A credential source ([CREDENTIAL-MANAGEMENT-1]) used by an authenticator to generate authentication assertions. A public key credential source ~~consists of a struct with~~ will contain the following items:

and at the end

Extensions supplied during the authenticatorMakeCredential operation MAY define additional data as part of the credential source.

This would give a path for SPC to define what information needs to be retained to differentiate the credential separately.

[timcappalli]

@timcappalli to talk to SPC folks about including this in their spec.

[timcappalli]

Issue created in SPC: https://github.com/w3c/secure-payment-confirmation/issues/278

Closing.