From 476e46b2e0c92e199c07658a80b0da0a456fe879 Mon Sep 17 00:00:00 2001 From: Emil Lundberg Date: Wed, 13 Nov 2024 18:24:52 +0100 Subject: [PATCH] fixup! Fix and un-Note note about constraints on credential ID length/format --- index.bs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.bs b/index.bs index 06e22f62a..0527b4d72 100644 --- a/index.bs +++ b/index.bs @@ -1703,7 +1703,7 @@ that are returned to the caller when a new credential is created, or a new asser with high probability across all credentials of the same type, across all authenticators. This API does not constrain the format of this identifier, - except that it MUST be no longer than 1023 bytes and MUST be sufficient for the [=authenticator=] to uniquely select a key. + except that it MUST NOT be longer than 1023 bytes and MUST be sufficient for the [=authenticator=] to uniquely select a key. For example, an authenticator without on-board storage may create identifiers containing a [=credential private key=] wrapped with a symmetric key that is burned into the authenticator.