Sign count checking

[koesie10]

webauthn/protocol/assertion.go

Lines 111 to 114 in 0adb1b7

	// TODO: 17. If the signature counter value authData.signCount is nonzero or the value stored in conjunction with
	// credential’s id attribute is nonzero, then run the following sub-step: ...

[kazuminn]

@koesie10 I'd like to implement it, but what do I have to do as a sub-step? It would be helpful if you could tell me more about it. I'm a vuls No.5 contributor, so I can golang to some extent.

https://github.com/future-architect/vuls

[SuperBox64]

MacOS software authenticators (passkeys) always set the sign count to zero.