{"action":"created","issue":{"url":"https://api.github.com/repos/w3c/webauthn/issues/108","repository_url":"https://api.github.com/repos/w3c/webauthn","labels_url":"https://api.github.com/repos/w3c/webauthn/issues/108/labels{/name}","comments_url":"https://api.github.com/repos/w3c/webauthn/issues/108/comments","events_url":"https://api.github.com/repos/w3c/webauthn/issues/108/events","html_url":"https://github.com/w3c/webauthn/issues/108","id":154715947,"number":108,"title":"Remove attestation specification from spec","user":{"login":"leshi","id":1407369,"avatar_url":"https://avatars.githubusercontent.com/u/1407369?v=3","gravatar_id":"","url":"https://api.github.com/users/leshi","html_url":"https://github.com/leshi","followers_url":"https://api.github.com/users/leshi/followers","following_url":"https://api.github.com/users/leshi/following{/other_user}","gists_url":"https://api.github.com/users/leshi/gists{/gist_id}","starred_url":"https://api.github.com/users/leshi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/leshi/subscriptions","organizations_url":"https://api.github.com/users/leshi/orgs","repos_url":"https://api.github.com/users/leshi/repos","events_url":"https://api.github.com/users/leshi/events{/privacy}","received_events_url":"https://api.github.com/users/leshi/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/w3c/webauthn/labels/priority:low","name":"priority:low","color":"fe8181"},{"url":"https://api.github.com/repos/w3c/webauthn/labels/type:technical","name":"type:technical","color":"ffca04"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/w3c/webauthn/milestones/4","html_url":"https://github.com/w3c/webauthn/milestones/WD-01","labels_url":"https://api.github.com/repos/w3c/webauthn/milestones/4/labels","id":1762332,"number":4,"title":"WD-01","description":"Issues to address prior to updating http://w3.org/TR/webauthn/","creator":{"login":"equalsJeffH","id":226571,"avatar_url":"https://avatars.githubusercontent.com/u/226571?v=3","gravatar_id":"","url":"https://api.github.com/users/equalsJeffH","html_url":"https://github.com/equalsJeffH","followers_url":"https://api.github.com/users/equalsJeffH/followers","following_url":"https://api.github.com/users/equalsJeffH/following{/other_user}","gists_url":"https://api.github.com/users/equalsJeffH/gists{/gist_id}","starred_url":"https://api.github.com/users/equalsJeffH/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/equalsJeffH/subscriptions","organizations_url":"https://api.github.com/users/equalsJeffH/orgs","repos_url":"https://api.github.com/users/equalsJeffH/repos","events_url":"https://api.github.com/users/equalsJeffH/events{/privacy}","received_events_url":"https://api.github.com/users/equalsJeffH/received_events","type":"User","site_admin":false},"open_issues":15,"closed_issues":5,"state":"open","created_at":"2016-05-12T12:49:57Z","updated_at":"2016-07-28T09:51:46Z","due_on":"2016-06-03T07:00:00Z","closed_at":null},"comments":11,"created_at":"2016-05-13T13:48:48Z","updated_at":"2016-07-28T22:15:26Z","closed_at":null,"body":"There seems to be growing consensus that detailed specification of attestation formats does not belong in this spec.\r\n\r\nPerhaps one way is to say that all attestation statements have a `type` and a `value`.  Where type is an enum and `value` is a byte array.  Each `type` enum will specify an outside reference for how servers interpret `value`.  For example, for `type=android-safetynet`, `value` should be interpreted as per http://developer.android.com/training/safetynet/index.html.  The webauthn spec would give this mapping and that's it."},"comment":{"url":"https://api.github.com/repos/w3c/webauthn/issues/comments/236041622","html_url":"https://github.com/w3c/webauthn/issues/108#issuecomment-236041622","issue_url":"https://api.github.com/repos/w3c/webauthn/issues/108","id":236041622,"user":{"login":"gmandyam","id":2521531,"avatar_url":"https://avatars.githubusercontent.com/u/2521531?v=3","gravatar_id":"","url":"https://api.github.com/users/gmandyam","html_url":"https://github.com/gmandyam","followers_url":"https://api.github.com/users/gmandyam/followers","following_url":"https://api.github.com/users/gmandyam/following{/other_user}","gists_url":"https://api.github.com/users/gmandyam/gists{/gist_id}","starred_url":"https://api.github.com/users/gmandyam/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gmandyam/subscriptions","organizations_url":"https://api.github.com/users/gmandyam/orgs","repos_url":"https://api.github.com/users/gmandyam/repos","events_url":"https://api.github.com/users/gmandyam/events{/privacy}","received_events_url":"https://api.github.com/users/gmandyam/received_events","type":"User","site_admin":false},"created_at":"2016-07-28T22:15:26Z","updated_at":"2016-07-28T22:15:26Z","body":"@equalsJeffH \r\n\"As far as I understand, W3C specs can, and do, reference non-W3C specifications, and so having references to TPM and Android SafetyNet should not be an issue in and of themselves. \"\r\n\r\nI disagree with the premise that SafetyNet constitutes a \"specification\"  I think we are still ignoring that SafetyNet is not defined by any recognized SDO and lacks sufficient publicly-available information to be considered a standard.  A registry won't fix that, but I am not aware of any W3C specifications that reference proprietary formats.\r\n\r\nIn summary, I see nothing to be gained by referencing opaque, proprietary attestation formats that do not map to a standard.  That can go in a registry."}}
{"actor":{"display_login":"gmandyam"}}