philomathic_life

> ICMP6 is supposedly not blocked. I have the following: > > ```shell > # grep icmp6 /etc/pf.conf > ## RFC 4890, icmp6(4) > icmp6_types="{unreach, toobig, timex, paramprob, echoreq, echorep}"...

Glad I saw this as I too am skeptical about the need to perform the domain-to-unicode algorithm. I've tried generating inputs that fail on step 3 using the below code...

[`PublicKeyCredentialRequestOptionsJSON.rpId`](https://www.w3.org/TR/webauthn-3/#dom-publickeycredentialrequestoptionsjson-rpid) should also be changed to a `USVString` too.

Perhaps it was an oversight, but [`PublicKeyCredential`](https://www.w3.org/TR/webauthn-3/#publickeycredential) only has a field for `authenticatorAttachment`. If `PublicKeyCredentialHints` is designed to be a replacement, then ideally `PublicKeyCredential` would be updated to contain a...

As I write my WebAuthn RP library, I do find it somewhat bizarre that `["hybrid"]` gets mapped to `"cross-platform"` instead of mapping to a missing value. According to the [`authenticatorAttachment`...

> No, I was not intentionally ordering the hints in that comment. RP's should be free to order hints as they see fit. Is this true? The spec says "if...

> IMO number 2 could just as easily put `"hybrid"` before `"security-key"` as the RP desires - nothing about hints forces any of them into buckets, that should be an...

@emlun, that makes sense. Thanks for the clarification.

Interesting, so [CTAP 2.2](https://fidoalliance.org/specs/fido-v2.2-rd-20230321/fido-client-to-authenticator-protocol-v2.2-rd-20230321.html#u2f-authenticatorMakeCredential-interoperability) seems to align with the figures and not `flags` documentation as it says, "let flags be a byte whose zeroth bit (bit 0, UP) is set,...

I'm confused. If something SHALL/MUST be something, then shouldn't that mean it's enforced independent of the RP Operations? If not, then using [RFC 2119](https://datatracker.ietf.org/doc/html/rfc2119#section-1) terminology—specifically "MUST", "SHALL", "REQUIRED", "MUST NOT",...