Bit set by the SPC extension should backed up as part of the Public Key Credential Source

[timcappalli]

PLACEHOLDER

Proposed Change

Bit set by the SPC extension should backed up as part of the Public Key Credential Source.

[selfissued]

This makes sense to me.

[dwaite]

Suggest altering the definition of credential source to say that extensions supplied during creation can define their own additional data, e.g.

A credential source ([CREDENTIAL-MANAGEMENT-1]) used by an authenticator to generate authentication assertions. A public key credential source consists of a struct with will contain the following items:

and at the end

Extensions supplied during the authenticatorMakeCredential operation MAY define additional data as part of the credential source.

This would give a path for SPC to define what information needs to be retained to differentiate the credential separately.