{"action":"opened","issue":{"url":"https://api.github.com/repos/w3c/webauthn/issues/94","repository_url":"https://api.github.com/repos/w3c/webauthn","labels_url":"https://api.github.com/repos/w3c/webauthn/issues/94/labels{/name}","comments_url":"https://api.github.com/repos/w3c/webauthn/issues/94/comments","events_url":"https://api.github.com/repos/w3c/webauthn/issues/94/events","html_url":"https://github.com/w3c/webauthn/issues/94","id":154479705,"number":94,"title":"clarify conveyance of attested public key","user":{"login":"equalsJeffH","id":226571,"avatar_url":"https://avatars.githubusercontent.com/u/226571?v=3","gravatar_id":"","url":"https://api.github.com/users/equalsJeffH","html_url":"https://github.com/equalsJeffH","followers_url":"https://api.github.com/users/equalsJeffH/followers","following_url":"https://api.github.com/users/equalsJeffH/following{/other_user}","gists_url":"https://api.github.com/users/equalsJeffH/gists{/gist_id}","starred_url":"https://api.github.com/users/equalsJeffH/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/equalsJeffH/subscriptions","organizations_url":"https://api.github.com/users/equalsJeffH/orgs","repos_url":"https://api.github.com/users/equalsJeffH/repos","events_url":"https://api.github.com/users/equalsJeffH/events{/privacy}","received_events_url":"https://api.github.com/users/equalsJeffH/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-05-12T13:16:42Z","updated_at":"2016-05-12T13:16:42Z","closed_at":null,"body":"the makeCredential() promise returns a ScopedCredentialInfo..\r\n```\r\ninterface ScopedCredentialInfo {\r\n    readonly attribute Credential           credential;\r\n    readonly attribute any                  publicKey;\r\n    readonly attribute WebAuthnAttestation  attestation;\r\n};\r\n```\r\n..wherein the publicKey attribute is intended to convey the \"attested public key\", which is the user's newly-generated public key to be registered with the webauthn relying party (WRP).\r\n\r\nHowever, in the \"Packed Attestation (type=\"packed\")\" section, there's this this text..\r\n```\r\nThe rawData object contains the attested public key and the clientDataHash. See §4.3.2.1.1 Attestation rawData for details.\r\n```\r\n..which is clearly saying the attested public key is being conveyed in the rawData object. \r\n\r\nPerhaps a hash of the attested public key ought to be conveyed in the rawData object, and it be made clear that the plaintext attested public key be conveyed in ScopedCredentials.publicKey.\r\n\r\nalso note that our terminology for the so-called attested public key needs to be normailzed, see #79 .\r\n"}}