diff --git a/index.html b/index.html
index a3aa030dc..0df551b0c 100644
--- a/index.html
+++ b/index.html
@@ -4,9 +4,9 @@
   <meta content="width=device-width, initial-scale=1, shrink-to-fit=no" name="viewport">
   <title>Web Authentication: An API for accessing Public Key Credentials - Level</title>
   <meta content="ED" name="w3c-status">
-  <meta content="Bikeshed version b06c00b8e, updated Tue Jul 11 13:41:16 2023 -0700" name="generator">
+  <meta content="Bikeshed version d29f71adb, updated Wed Jul 19 11:08:56 2023 -0700" name="generator">
   <link href="https://www.w3.org/TR/webauthn-3/" rel="canonical">
-  <meta content="5bd3dd1ccffcbdc50873d551fbd1606e4023340d" name="document-revision">
+  <meta content="6b68667f163e36d8546b37832b77b8945f97a4b2" name="document-revision">
 <style type="text/css">
 body {
     counter-reset: table;
@@ -914,7 +914,7 @@
   <div class="head">
    <p data-fill-with="logo"><a class="logo" href="https://www.w3.org/"> <img alt="W3C" height="48" src="https://www.w3.org/StyleSheets/TR/2021/logos/W3C" width="72"> </a> </p>
    <h1>Web Authentication:<br>An API for accessing Public Key Credentials<br>Level 3</h1>
-   <p id="w3c-state"><a href="https://www.w3.org/standards/types#ED">Editor’s Draft</a>, <time class="dt-updated" datetime="2023-07-12">12 July 2023</time></p>
+   <p id="w3c-state"><a href="https://www.w3.org/standards/types#ED">Editor’s Draft</a>, <time class="dt-updated" datetime="2023-08-09">9 August 2023</time></p>
    <details open>
     <summary>More details about this document</summary>
     <div data-fill-with="spec-metadata">
@@ -994,7 +994,7 @@ <h2 class="no-num no-toc no-ref heading settled" id="sotd"><span class="content"
     includes instructions for disclosing a patent. An individual who has actual knowledge of a
     patent which the individual believes contains <a href="https://www.w3.org/Consortium/Patent-Policy/#def-essential">Essential
     Claim(s)</a> must disclose the information in accordance with <a href="https://www.w3.org/Consortium/Patent-Policy/#sec-Disclosure">section 6 of the <abbr title="World Wide Web Consortium">W3C</abbr> Patent Policy</a>. </p>
-   <p> This document is governed by the <a href="https://www.w3.org/2021/Process-20211102/" id="w3c_process_revision">2 November 2021 W3C Process Document</a>. </p>
+   <p> This document is governed by the <a href="https://www.w3.org/2023/Process-20230612/" id="w3c_process_revision">12 June 2023 W3C Process Document</a>. </p>
    <p></p>
   </div>
   <div data-fill-with="at-risk"></div>
@@ -5697,9 +5697,11 @@ <h3 class="heading settled" data-level="7.1" id="sctn-registering-a-new-credenti
      <p>If the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②④⑤">Relying Party</a> requires <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification④④">user verification</a> for this registration,
 verify that the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①②">UV</a> bit of the <code><a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags③⑥">flags</a></code> in <var>authData</var> is set.</p>
     <li data-md>
-     <p>If the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②④⑥">Relying Party</a> uses the credential’s <a data-link-type="dfn" href="#backup-eligibility" id="ref-for-backup-eligibility③">backup eligibility</a> to inform its user experience flows and/or policies, evaluate the <a data-link-type="dfn" href="#authdata-flags-be" id="ref-for-authdata-flags-be⑥">BE</a> bit of the <code><a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags③⑦">flags</a></code> in <var>authData</var>.</p>
+     <p>If the <a data-link-type="dfn" href="#authdata-flags-be" id="ref-for-authdata-flags-be⑥">BE</a> bit of the <code><a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags③⑦">flags</a></code> in <var>authData</var> is not set, verify that the <a data-link-type="dfn" href="#authdata-flags-bs" id="ref-for-authdata-flags-bs⑦">BS</a> bit is not set.</p>
     <li data-md>
-     <p>If the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②④⑦">Relying Party</a> uses the credential’s <a data-link-type="dfn" href="#backup-state" id="ref-for-backup-state③">backup state</a> to inform its user experience flows and/or policies, evaluate the <a data-link-type="dfn" href="#authdata-flags-bs" id="ref-for-authdata-flags-bs⑦">BS</a> bit of the <code><a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags③⑧">flags</a></code> in <var>authData</var>.</p>
+     <p>If the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②④⑥">Relying Party</a> uses the credential’s <a data-link-type="dfn" href="#backup-eligibility" id="ref-for-backup-eligibility③">backup eligibility</a> to inform its user experience flows and/or policies, evaluate the <a data-link-type="dfn" href="#authdata-flags-be" id="ref-for-authdata-flags-be⑦">BE</a> bit of the <code><a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags③⑧">flags</a></code> in <var>authData</var>.</p>
+    <li data-md>
+     <p>If the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②④⑦">Relying Party</a> uses the credential’s <a data-link-type="dfn" href="#backup-state" id="ref-for-backup-state③">backup state</a> to inform its user experience flows and/or policies, evaluate the <a data-link-type="dfn" href="#authdata-flags-bs" id="ref-for-authdata-flags-bs⑧">BS</a> bit of the <code><a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags③⑨">flags</a></code> in <var>authData</var>.</p>
     <li data-md>
      <p>Verify that the "alg" parameter in the <a data-link-type="dfn" href="#authdata-attestedcredentialdata-credentialpublickey" id="ref-for-authdata-attestedcredentialdata-credentialpublickey⑤">credential public key</a> in <var>authData</var> matches the <code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialparameters-alg" id="ref-for-dom-publickeycredentialparameters-alg②">alg</a></code> attribute of one of the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-item" id="ref-for-list-item①②">items</a> in <code><var>options</var>.<code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialcreationoptions-pubkeycredparams" id="ref-for-dom-publickeycredentialcreationoptions-pubkeycredparams④">pubKeyCredParams</a></code></code>.</p>
     <li id="reg-ceremony-verify-extension-outputs">
@@ -5762,16 +5764,16 @@ <h3 class="heading settled" data-level="7.1" id="sctn-registering-a-new-credenti
        <p><code><var>authData</var>.<a data-link-type="dfn" href="#authdata-signcount" id="ref-for-authdata-signcount⑤">signCount</a></code>.</p>
       <dt data-md><a data-link-type="abstract-op" href="#abstract-opdef-credential-record-uvinitialized" id="ref-for-abstract-opdef-credential-record-uvinitialized②">uvInitialized</a>
       <dd data-md>
-       <p>The value of the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①③">UV</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags③⑨">flag</a> in <var>authData</var>.</p>
+       <p>The value of the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①③">UV</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④⓪">flag</a> in <var>authData</var>.</p>
       <dt data-md><a data-link-type="abstract-op" href="#abstract-opdef-credential-record-transports" id="ref-for-abstract-opdef-credential-record-transports①">transports</a>
       <dd data-md>
        <p>The value returned from <code><var>response</var>.<code class="idl"><a data-link-type="idl" href="#dom-authenticatorattestationresponse-gettransports" id="ref-for-dom-authenticatorattestationresponse-gettransports⑦">getTransports()</a></code></code>.</p>
       <dt data-md><a data-link-type="abstract-op" href="#abstract-opdef-credential-record-backupeligible" id="ref-for-abstract-opdef-credential-record-backupeligible">backupEligible</a>
       <dd data-md>
-       <p>The value of the <a data-link-type="dfn" href="#authdata-flags-be" id="ref-for-authdata-flags-be⑦">BE</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④⓪">flag</a> in <var>authData</var>.</p>
+       <p>The value of the <a data-link-type="dfn" href="#authdata-flags-be" id="ref-for-authdata-flags-be⑧">BE</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④①">flag</a> in <var>authData</var>.</p>
       <dt data-md><a data-link-type="abstract-op" href="#abstract-opdef-credential-record-backupstate" id="ref-for-abstract-opdef-credential-record-backupstate">backupState</a>
       <dd data-md>
-       <p>The value of the <a data-link-type="dfn" href="#authdata-flags-bs" id="ref-for-authdata-flags-bs⑧">BS</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④①">flag</a> in <var>authData</var>.</p>
+       <p>The value of the <a data-link-type="dfn" href="#authdata-flags-bs" id="ref-for-authdata-flags-bs⑨">BS</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④②">flag</a> in <var>authData</var>.</p>
      </dl>
      <p>The new <a data-link-type="dfn" href="#credential-record" id="ref-for-credential-record⑦">credential record</a> MAY also include the following OPTIONAL contents:</p>
      <dl>
@@ -5859,18 +5861,28 @@ <h3 class="heading settled" data-level="7.2" id="sctn-verifying-assertion"><span
      <a class="self-link" href="#rp-op-verifying-assertion-step-rpid-hash"></a> Verify that the <code><a data-link-type="dfn" href="#authdata-rpidhash" id="ref-for-authdata-rpidhash③">rpIdHash</a></code> in <var>authData</var> is the SHA-256 hash of the <a data-link-type="dfn" href="#rp-id" id="ref-for-rp-id③⑧">RP ID</a> expected by the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑦⓪">Relying Party</a>. 
      <p class="note" role="note"><span class="marker">Note:</span> If using the <a data-link-type="dfn" href="#appid" id="ref-for-appid①">appid</a> extension, this step needs some special logic. See <a href="#sctn-appid-extension">§ 10.1.1 FIDO AppID Extension (appid)</a> for details.</p>
     <li data-md>
-     <p>Verify that the <a data-link-type="dfn" href="#authdata-flags-up" id="ref-for-authdata-flags-up④">UP</a> bit of the <code><a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④②">flags</a></code> in <var>authData</var> is set.</p>
+     <p>Verify that the <a data-link-type="dfn" href="#authdata-flags-up" id="ref-for-authdata-flags-up④">UP</a> bit of the <code><a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④③">flags</a></code> in <var>authData</var> is set.</p>
     <li data-md>
      <p>Determine whether <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification④⑤">user verification</a> is required for this assertion. <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification④⑥">User verification</a> SHOULD be required if, and only if, <code><var>options</var>.<code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialrequestoptions-userverification" id="ref-for-dom-publickeycredentialrequestoptions-userverification④">userVerification</a></code></code> is set to <code class="idl"><a data-link-type="idl" href="#dom-userverificationrequirement-required" id="ref-for-dom-userverificationrequirement-required⑥">required</a></code>.</p>
      <p>If <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification④⑦">user verification</a> was determined to be required,
-verify that the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①④">UV</a> bit of the <code><a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④③">flags</a></code> in <var>authData</var> is set.
-Otherwise, ignore the value of the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①⑤">UV</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④④">flag</a>.</p>
+verify that the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①④">UV</a> bit of the <code><a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④④">flags</a></code> in <var>authData</var> is set.
+Otherwise, ignore the value of the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①⑤">UV</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④⑤">flag</a>.</p>
+    <li data-md>
+     <p>If the <a data-link-type="dfn" href="#authdata-flags-be" id="ref-for-authdata-flags-be⑨">BE</a> bit of the <code><a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④⑥">flags</a></code> in <var>authData</var> is not set, verify that the <a data-link-type="dfn" href="#authdata-flags-bs" id="ref-for-authdata-flags-bs①⓪">BS</a> bit is not set.</p>
     <li data-md>
      <p>If the credential <a data-link-type="dfn" href="#backup-state" id="ref-for-backup-state④">backup state</a> is used as part of <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑦①">Relying Party</a> business logic or policy,
-let <var>currentBe</var> and <var>currentBs</var> be the values of the <a data-link-type="dfn" href="#authdata-flags-be" id="ref-for-authdata-flags-be⑧">BE</a> and <a data-link-type="dfn" href="#authdata-flags-bs" id="ref-for-authdata-flags-bs⑨">BS</a> bits, respectively,
-of the <code><a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④⑤">flags</a></code> in <var>authData</var>.
-Compare <var>currentBe</var> and <var>currentBs</var> with <code><var>credentialRecord</var>.<a data-link-type="abstract-op" href="#abstract-opdef-credential-record-backupeligible" id="ref-for-abstract-opdef-credential-record-backupeligible①">backupEligible</a></code> and <code><var>credentialRecord</var>.<a data-link-type="abstract-op" href="#abstract-opdef-credential-record-backupstate" id="ref-for-abstract-opdef-credential-record-backupstate①">backupState</a></code> and apply <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑦②">Relying Party</a> policy, if any.</p>
-     <p class="note" role="note"><span class="marker">Note:</span> See <a href="#sctn-credential-backup">§ 6.1.3 Credential Backup State</a> for examples of how a <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑦③">Relying Party</a> might process the <a data-link-type="dfn" href="#authdata-flags-bs" id="ref-for-authdata-flags-bs①⓪">BS</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④⑥">flag</a> values.</p>
+let <var>currentBe</var> and <var>currentBs</var> be the values of the <a data-link-type="dfn" href="#authdata-flags-be" id="ref-for-authdata-flags-be①⓪">BE</a> and <a data-link-type="dfn" href="#authdata-flags-bs" id="ref-for-authdata-flags-bs①①">BS</a> bits, respectively,
+of the <code><a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④⑦">flags</a></code> in <var>authData</var>.
+Compare <var>currentBe</var> and <var>currentBs</var> with <code><var>credentialRecord</var>.<a data-link-type="abstract-op" href="#abstract-opdef-credential-record-backupeligible" id="ref-for-abstract-opdef-credential-record-backupeligible①">backupEligible</a></code> and <code><var>credentialRecord</var>.<a data-link-type="abstract-op" href="#abstract-opdef-credential-record-backupstate" id="ref-for-abstract-opdef-credential-record-backupstate①">backupState</a></code>:</p>
+     <ol>
+      <li data-md>
+       <p>If <code><var>credentialRecord</var>.<a data-link-type="abstract-op" href="#abstract-opdef-credential-record-backupeligible" id="ref-for-abstract-opdef-credential-record-backupeligible②">backupEligible</a></code> is set, verify that <var>currentBe</var> is set.</p>
+      <li data-md>
+       <p>If <code><var>credentialRecord</var>.<a data-link-type="abstract-op" href="#abstract-opdef-credential-record-backupeligible" id="ref-for-abstract-opdef-credential-record-backupeligible③">backupEligible</a></code> is not set, verify that <var>currentBe</var> is not set.</p>
+      <li data-md>
+       <p>Apply <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑦②">Relying Party</a> policy, if any.</p>
+     </ol>
+     <p class="note" role="note"><span class="marker">Note:</span> See <a href="#sctn-credential-backup">§ 6.1.3 Credential Backup State</a> for examples of how a <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑦③">Relying Party</a> might process the <a data-link-type="dfn" href="#authdata-flags-bs" id="ref-for-authdata-flags-bs①②">BS</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④⑧">flag</a> values.</p>
     <li id="authn-ceremony-verify-extension-outputs">
      <a class="self-link" href="#authn-ceremony-verify-extension-outputs"></a> Verify that the values of the <a data-link-type="dfn" href="#client-extension-output" id="ref-for-client-extension-output⑧">client extension outputs</a> in <var>clientExtensionResults</var> and the <a data-link-type="dfn" href="#authenticator-extension-output" id="ref-for-authenticator-extension-output⑤">authenticator extension
     outputs</a> in the <code><a data-link-type="dfn" href="#authdata-extensions" id="ref-for-authdata-extensions⑧">extensions</a></code> in <var>authData</var> are as expected, considering the <a data-link-type="dfn" href="#client-extension-input" id="ref-for-client-extension-input⑥">client
@@ -5910,7 +5922,7 @@ <h3 class="heading settled" data-level="7.2" id="sctn-verifying-assertion"><span
      <p>If <code><var>response</var>.<code class="idl"><a data-link-type="idl" href="#dom-authenticatorassertionresponse-attestationobject" id="ref-for-dom-authenticatorassertionresponse-attestationobject③">attestationObject</a></code></code> is present and the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party②⑧②">Relying Party</a> wishes to verify the attestation then perform CBOR decoding on <code class="idl"><a data-link-type="idl" href="#dom-authenticatorassertionresponse-attestationobject" id="ref-for-dom-authenticatorassertionresponse-attestationobject④">attestationObject</a></code> to obtain the attestation statement format <var>fmt</var>, and the attestation statement <var>attStmt</var>.</p>
      <ol>
       <li data-md>
-       <p>Verify that the <code>AT</code> bit in the <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④⑦">flags</a> field of <var>authData</var> is set, indicating that <a data-link-type="dfn" href="#attested-credential-data" id="ref-for-attested-credential-data①④">attested credential data</a> is included.</p>
+       <p>Verify that the <code>AT</code> bit in the <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④⑨">flags</a> field of <var>authData</var> is set, indicating that <a data-link-type="dfn" href="#attested-credential-data" id="ref-for-attested-credential-data①④">attested credential data</a> is included.</p>
       <li data-md>
        <p>Verify that the <a data-link-type="dfn" href="#authdata-attestedcredentialdata-credentialpublickey" id="ref-for-authdata-attestedcredentialdata-credentialpublickey⑥">credentialPublicKey</a> and <a data-link-type="dfn" href="#authdata-attestedcredentialdata-credentialid" id="ref-for-authdata-attestedcredentialdata-credentialid⑦">credentialId</a> fields of the <a data-link-type="dfn" href="#attested-credential-data" id="ref-for-attested-credential-data①⑤">attested credential data</a> in <var>authData</var> match <code><var>credentialRecord</var>.<a data-link-type="abstract-op" href="#abstract-opdef-credential-record-publickey" id="ref-for-abstract-opdef-credential-record-publickey②">publicKey</a></code> and <code><var>credentialRecord</var>.<a data-link-type="abstract-op" href="#abstract-opdef-credential-record-id" id="ref-for-abstract-opdef-credential-record-id④">id</a></code>, respectively.</p>
       <li data-md>
@@ -5930,7 +5942,7 @@ <h3 class="heading settled" data-level="7.2" id="sctn-verifying-assertion"><span
        <p>Update <code><var>credentialRecord</var>.<a data-link-type="abstract-op" href="#abstract-opdef-credential-record-backupstate" id="ref-for-abstract-opdef-credential-record-backupstate②">backupState</a></code> to the value of <var>currentBs</var>.</p>
       <li data-md>
        <p>If <code><var>credentialRecord</var>.<a data-link-type="abstract-op" href="#abstract-opdef-credential-record-uvinitialized" id="ref-for-abstract-opdef-credential-record-uvinitialized③">uvInitialized</a></code> is <code>false</code>,
-update it to the value of the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①⑥">UV</a> bit in the <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④⑧">flags</a> in <var>authData</var>.
+update it to the value of the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①⑥">UV</a> bit in the <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags⑤⓪">flags</a> in <var>authData</var>.
 This change SHOULD require authorization by an additional <a data-link-type="dfn" href="https://pages.nist.gov/800-63-3/sp800-63-3.html#af" id="ref-for-af②④">authentication factor</a> equivalent to WebAuthn <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification④⑧">user verification</a>;
 if not authorized, skip this step.</p>
       <li data-md>
@@ -6975,7 +6987,7 @@ <h4 class="heading settled" data-level="10.1.4" id="prf-extension"><span class="
        <p>Set <code class="idl"><a data-link-type="idl" href="#dom-authenticationextensionsprfoutputs-results" id="ref-for-dom-authenticationextensionsprfoutputs-results">results</a></code> to the decrypted PRF result(s), if any.</p>
      </ol>
    </dl>
-   <p class="note" role="note"><span class="marker">Note:</span> If PRF results are obtained during <a data-link-type="dfn" href="#registration" id="ref-for-registration②⓪">registration</a> then the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③⓪②">Relying Party</a> MUST inspect the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①⑦">UV</a> bit in the <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags④⑨">flags</a> of the response in order to determine the correct value of <code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialrequestoptions-userverification" id="ref-for-dom-publickeycredentialrequestoptions-userverification⑤">userVerification</a></code> for future <a data-link-type="dfn" href="#assertion" id="ref-for-assertion①①">assertions</a>. Otherwise results from <a data-link-type="dfn" href="#assertion" id="ref-for-assertion①②">assertions</a> may be inconsistent with those from the <a data-link-type="dfn" href="#registration" id="ref-for-registration②①">registration</a>.</p>
+   <p class="note" role="note"><span class="marker">Note:</span> If PRF results are obtained during <a data-link-type="dfn" href="#registration" id="ref-for-registration②⓪">registration</a> then the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party③⓪②">Relying Party</a> MUST inspect the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①⑦">UV</a> bit in the <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags⑤①">flags</a> of the response in order to determine the correct value of <code class="idl"><a data-link-type="idl" href="#dom-publickeycredentialrequestoptions-userverification" id="ref-for-dom-publickeycredentialrequestoptions-userverification⑤">userVerification</a></code> for future <a data-link-type="dfn" href="#assertion" id="ref-for-assertion①①">assertions</a>. Otherwise results from <a data-link-type="dfn" href="#assertion" id="ref-for-assertion①②">assertions</a> may be inconsistent with those from the <a data-link-type="dfn" href="#registration" id="ref-for-registration②①">registration</a>.</p>
    <dl>
     <dt data-md>Client extension processing (<a data-link-type="dfn" href="#authentication-extension" id="ref-for-authentication-extension①①">authentication</a>)
     <dd data-md>
@@ -8516,7 +8528,7 @@ <h3 class="heading settled" data-level="14.3" id="sctn-biometric-privacy"><span
 not revealed to the <a data-link-type="dfn" href="#webauthn-relying-party" id="ref-for-webauthn-relying-party⑤①">WebAuthn Relying Party</a>; it is used only locally to perform <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification⑤⑦">user verification</a> authorizing the creation and <a data-link-type="dfn" href="#registration" id="ref-for-registration②⑧">registration</a> of, or <a data-link-type="dfn" href="#authentication" id="ref-for-authentication①⑦">authentication</a> using, a <a data-link-type="dfn" href="#public-key-credential" id="ref-for-public-key-credential⑦④">public key credential</a>. A malicious <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④⓪⑤">Relying Party</a> therefore cannot discover the
 user’s personal identity via biometric data, and a security breach at a <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④⓪⑥">Relying Party</a> cannot expose biometric data for an attacker to
 use for forging logins at other <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④⓪⑦">Relying Parties</a>.</p>
-   <p>In the case where a <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④⓪⑧">Relying Party</a> requires <a data-link-type="dfn" href="#biometric-recognition" id="ref-for-biometric-recognition⑥">biometric recognition</a>, this is performed locally by the <a data-link-type="dfn" href="#biometric-authenticator" id="ref-for-biometric-authenticator②">biometric authenticator</a> perfoming <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification⑤⑧">user verification</a> and then signaling the result by setting the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①⑧">UV</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags⑤⓪">flag</a> in the signed <a data-link-type="dfn" href="#assertion" id="ref-for-assertion①⑦">assertion</a> response,
+   <p>In the case where a <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④⓪⑧">Relying Party</a> requires <a data-link-type="dfn" href="#biometric-recognition" id="ref-for-biometric-recognition⑥">biometric recognition</a>, this is performed locally by the <a data-link-type="dfn" href="#biometric-authenticator" id="ref-for-biometric-authenticator②">biometric authenticator</a> perfoming <a data-link-type="dfn" href="#user-verification" id="ref-for-user-verification⑤⑧">user verification</a> and then signaling the result by setting the <a data-link-type="dfn" href="#authdata-flags-uv" id="ref-for-authdata-flags-uv①⑧">UV</a> <a data-link-type="dfn" href="#authdata-flags" id="ref-for-authdata-flags⑤②">flag</a> in the signed <a data-link-type="dfn" href="#assertion" id="ref-for-assertion①⑦">assertion</a> response,
 instead of revealing the biometric data itself to the <a data-link-type="dfn" href="#relying-party" id="ref-for-relying-party④⓪⑨">Relying Party</a>.</p>
    <h3 class="heading settled" data-level="14.4" id="sctn-privacy-considerations-authenticator"><span class="secno">14.4. </span><span class="content">Privacy considerations for <a data-link-type="dfn" href="#authenticator" id="ref-for-authenticator③①⑥">authenticators</a></span><a class="self-link" href="#sctn-privacy-considerations-authenticator"></a></h3>
    <h4 class="heading settled" data-level="14.4.1" id="sctn-attestation-privacy"><span class="secno">14.4.1. </span><span class="content">Attestation Privacy</span><a class="self-link" href="#sctn-attestation-privacy"></a></h4>
@@ -10441,7 +10453,7 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
   <details class="mdn-anno unpositioned" data-anno-for="sctn-permissions-policy">
    <summary><b class="less-than-two-engines-flag" title="This feature is in less than two current engines.">⚠</b><span>MDN</span></summary>
    <div class="feature">
-    <p><a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy/publickey-credentials-get" title="The HTTP Permissions-Policy header publickey-credentials-get directive controls whether the current document is allowed to access the Web Authentication API to retrieve public-key credentials, i.e., via navigator.credentials.get({publicKey})">Headers/Feature-Policy/publickey-credentials-get</a></p>
+    <p><a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy/publickey-credentials-get" title="The HTTP Permissions-Policy header publickey-credentials-get directive controls whether the current document is allowed to access the Web Authentication API to retrieve public-key credentials, i.e., via navigator.credentials.get({publicKey}).">Headers/Feature-Policy/publickey-credentials-get</a></p>
     <p class="less-than-two-engines-text">In only one current engine.</p>
     <div class="support">
      <span class="firefox no"><span>Firefox</span><span>None</span></span><span class="safari no"><span>Safari</span><span>None</span></span><span class="chrome yes"><span>Chrome</span><span>84+</span></span>
@@ -10467,7 +10479,7 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
     </div>
    </div>
    <div class="feature">
-    <p><a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy/publickey-credentials-get" title="The HTTP Permissions-Policy header publickey-credentials-get directive controls whether the current document is allowed to access the Web Authentication API to retrieve public-key credentials, i.e., via navigator.credentials.get({publicKey})">Headers/Permissions-Policy/publickey-credentials-get</a></p>
+    <p><a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy/publickey-credentials-get" title="The HTTP Permissions-Policy header publickey-credentials-get directive controls whether the current document is allowed to access the Web Authentication API to retrieve public-key credentials, i.e., via navigator.credentials.get({publicKey}).">Headers/Permissions-Policy/publickey-credentials-get</a></p>
     <p class="less-than-two-engines-text">In only one current engine.</p>
     <div class="support">
      <span class="firefox no"><span>Firefox</span><span>None</span></span><span class="safari no"><span>Safari</span><span>None</span></span><span class="chrome yes"><span>Chrome</span><span>88+</span></span>
@@ -11030,7 +11042,7 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['abstract-opdef-credential-record-signcount'] = {"dfnID": "abstract-opdef-credential-record-signcount", "url": "#abstract-opdef-credential-record-signcount", "dfnText": "signCount", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-signcount"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-signcount\u2460"}, {"id": "ref-for-abstract-opdef-credential-record-signcount\u2461"}, {"id": "ref-for-abstract-opdef-credential-record-signcount\u2462"}, {"id": "ref-for-abstract-opdef-credential-record-signcount\u2463"}, {"id": "ref-for-abstract-opdef-credential-record-signcount\u2464"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
 window.dfnpanelData['abstract-opdef-credential-record-transports'] = {"dfnID": "abstract-opdef-credential-record-transports", "url": "#abstract-opdef-credential-record-transports", "dfnText": "transports", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-transports"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-transports\u2460"}], "title": "7.1. Registering a New Credential"}], "external": false};
 window.dfnpanelData['abstract-opdef-credential-record-uvinitialized'] = {"dfnID": "abstract-opdef-credential-record-uvinitialized", "url": "#abstract-opdef-credential-record-uvinitialized", "dfnText": "uvInitialized", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-uvinitialized"}, {"id": "ref-for-abstract-opdef-credential-record-uvinitialized\u2460"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-uvinitialized\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-uvinitialized\u2462"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['abstract-opdef-credential-record-backupeligible'] = {"dfnID": "abstract-opdef-credential-record-backupeligible", "url": "#abstract-opdef-credential-record-backupeligible", "dfnText": "backupEligible", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-backupeligible"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-backupeligible\u2460"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
+window.dfnpanelData['abstract-opdef-credential-record-backupeligible'] = {"dfnID": "abstract-opdef-credential-record-backupeligible", "url": "#abstract-opdef-credential-record-backupeligible", "dfnText": "backupEligible", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-backupeligible"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-backupeligible\u2460"}, {"id": "ref-for-abstract-opdef-credential-record-backupeligible\u2461"}, {"id": "ref-for-abstract-opdef-credential-record-backupeligible\u2462"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
 window.dfnpanelData['abstract-opdef-credential-record-backupstate'] = {"dfnID": "abstract-opdef-credential-record-backupstate", "url": "#abstract-opdef-credential-record-backupstate", "dfnText": "backupState", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-backupstate"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-backupstate\u2460"}, {"id": "ref-for-abstract-opdef-credential-record-backupstate\u2461"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
 window.dfnpanelData['abstract-opdef-credential-record-attestationobject'] = {"dfnID": "abstract-opdef-credential-record-attestationobject", "url": "#abstract-opdef-credential-record-attestationobject", "dfnText": "attestationObject", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-attestationobject"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-attestationobject\u2460"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-attestationobject\u2461"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-attestationobject\u2462"}], "title": "10.2.2.3. devicePubKey Extension Output Verification Procedures"}], "external": false};
 window.dfnpanelData['abstract-opdef-credential-record-attestationclientdatajson'] = {"dfnID": "abstract-opdef-credential-record-attestationclientdatajson", "url": "#abstract-opdef-credential-record-attestationclientdatajson", "dfnText": "attestationClientDataJSON", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-credential-record-attestationclientdatajson"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-abstract-opdef-credential-record-attestationclientdatajson\u2460"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
@@ -11233,11 +11245,11 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['webauthn-signature'] = {"dfnID": "webauthn-signature", "url": "#webauthn-signature", "dfnText": "WebAuthn signature", "refSections": [{"refs": [{"id": "ref-for-webauthn-signature"}], "title": "5.8.1. Client Data Used in WebAuthn Signatures (dictionary CollectedClientData)"}, {"refs": [{"id": "ref-for-webauthn-signature\u2460"}], "title": "6. WebAuthn Authenticator Model"}], "external": false};
 window.dfnpanelData['authenticator-data'] = {"dfnID": "authenticator-data", "url": "#authenticator-data", "dfnText": "authenticator data", "refSections": [{"refs": [{"id": "ref-for-authenticator-data"}], "title": "1.1. Specification Roadmap"}, {"refs": [{"id": "ref-for-authenticator-data\u2460"}, {"id": "ref-for-authenticator-data\u2461"}, {"id": "ref-for-authenticator-data\u2462"}, {"id": "ref-for-authenticator-data\u2463"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authenticator-data\u2464"}], "title": "5.1.4.1. PublicKeyCredential\u2019s [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) Method"}, {"refs": [{"id": "ref-for-authenticator-data\u2465"}, {"id": "ref-for-authenticator-data\u2466"}, {"id": "ref-for-authenticator-data\u2467"}], "title": "5.2.1. Information About Public Key Credential (interface AuthenticatorAttestationResponse)"}, {"refs": [{"id": "ref-for-authenticator-data\u2468"}, {"id": "ref-for-authenticator-data\u2460\u24ea"}, {"id": "ref-for-authenticator-data\u2460\u2460"}, {"id": "ref-for-authenticator-data\u2460\u2461"}, {"id": "ref-for-authenticator-data\u2460\u2462"}], "title": "5.2.1.1. Easily accessing credential data"}, {"refs": [{"id": "ref-for-authenticator-data\u2460\u2463"}, {"id": "ref-for-authenticator-data\u2460\u2464"}], "title": "5.2.2. Web Authentication Assertion (interface AuthenticatorAssertionResponse)"}, {"refs": [{"id": "ref-for-authenticator-data\u2460\u2465"}], "title": "5.7. WebAuthn Extensions Inputs and Outputs"}, {"refs": [{"id": "ref-for-authenticator-data\u2460\u2466"}, {"id": "ref-for-authenticator-data\u2460\u2467"}], "title": "6. WebAuthn Authenticator Model"}, {"refs": [{"id": "ref-for-authenticator-data\u2460\u2468"}, {"id": "ref-for-authenticator-data\u2461\u24ea"}, {"id": "ref-for-authenticator-data\u2461\u2460"}, {"id": "ref-for-authenticator-data\u2461\u2461"}, {"id": "ref-for-authenticator-data\u2461\u2462"}, {"id": "ref-for-authenticator-data\u2461\u2463"}, {"id": "ref-for-authenticator-data\u2461\u2464"}, {"id": "ref-for-authenticator-data\u2461\u2465"}, {"id": "ref-for-authenticator-data\u2461\u2466"}, {"id": "ref-for-authenticator-data\u2461\u2467"}, {"id": "ref-for-authenticator-data\u2461\u2468"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authenticator-data\u2462\u24ea"}, {"id": "ref-for-authenticator-data\u2462\u2460"}, {"id": "ref-for-authenticator-data\u2462\u2461"}, {"id": "ref-for-authenticator-data\u2462\u2462"}], "title": "6.1.1. Signature Counter Considerations"}, {"refs": [{"id": "ref-for-authenticator-data\u2462\u2463"}, {"id": "ref-for-authenticator-data\u2462\u2464"}, {"id": "ref-for-authenticator-data\u2462\u2465"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}, {"refs": [{"id": "ref-for-authenticator-data\u2462\u2466"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-authenticator-data\u2462\u2467"}], "title": "6.3.2. The authenticatorMakeCredential Operation"}, {"refs": [{"id": "ref-for-authenticator-data\u2462\u2468"}], "title": "6.3.3. The authenticatorGetAssertion Operation"}, {"refs": [{"id": "ref-for-authenticator-data\u2463\u24ea"}, {"id": "ref-for-authenticator-data\u2463\u2460"}], "title": "6.5. Attestation"}, {"refs": [{"id": "ref-for-authenticator-data\u2463\u2461"}], "title": "6.5.1. Attestation in assertions"}, {"refs": [{"id": "ref-for-authenticator-data\u2463\u2462"}, {"id": "ref-for-authenticator-data\u2463\u2463"}, {"id": "ref-for-authenticator-data\u2463\u2464"}], "title": "6.5.2. Attested Credential Data"}, {"refs": [{"id": "ref-for-authenticator-data\u2463\u2465"}, {"id": "ref-for-authenticator-data\u2463\u2466"}], "title": "6.5.3. Attestation Statement Formats"}, {"refs": [{"id": "ref-for-authenticator-data\u2463\u2467"}], "title": "6.5.5. Generating an Attestation Object"}, {"refs": [{"id": "ref-for-authenticator-data\u2463\u2468"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authenticator-data\u2464\u24ea"}], "title": "8.5. Android SafetyNet Attestation Statement Format"}, {"refs": [{"id": "ref-for-authenticator-data\u2464\u2460"}, {"id": "ref-for-authenticator-data\u2464\u2461"}], "title": "9. WebAuthn Extensions"}, {"refs": [{"id": "ref-for-authenticator-data\u2464\u2462"}, {"id": "ref-for-authenticator-data\u2464\u2463"}, {"id": "ref-for-authenticator-data\u2464\u2464"}], "title": "9.5. Authenticator Extension Processing"}, {"refs": [{"id": "ref-for-authenticator-data\u2464\u2465"}], "title": "10.2.1. User Verification Method Extension (uvm)"}, {"refs": [{"id": "ref-for-authenticator-data\u2464\u2466"}], "title": "10.2.2.2. Extension Definition"}, {"refs": [{"id": "ref-for-authenticator-data\u2464\u2467"}], "title": "10.2.2.3.2. Authentication (get())"}, {"refs": [{"id": "ref-for-authenticator-data\u2464\u2468"}], "title": "13.1. Credential ID Unsigned"}, {"refs": [{"id": "ref-for-authenticator-data\u2465\u24ea"}], "title": "13.3.1. Attestation Certificate Hierarchy"}], "external": false};
 window.dfnpanelData['authdata-rpidhash'] = {"dfnID": "authdata-rpidhash", "url": "#authdata-rpidhash", "dfnText": "rpIdHash", "refSections": [{"refs": [{"id": "ref-for-authdata-rpidhash"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authdata-rpidhash\u2460"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}, {"refs": [{"id": "ref-for-authdata-rpidhash\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-rpidhash\u2462"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authdata-rpidhash\u2463"}, {"id": "ref-for-authdata-rpidhash\u2464"}], "title": "10.1.1. FIDO AppID Extension (appid)"}], "external": false};
-window.dfnpanelData['authdata-flags'] = {"dfnID": "authdata-flags", "url": "#authdata-flags", "dfnText": "flags", "refSections": [{"refs": [{"id": "ref-for-authdata-flags"}, {"id": "ref-for-authdata-flags\u2460"}, {"id": "ref-for-authdata-flags\u2461"}, {"id": "ref-for-authdata-flags\u2462"}, {"id": "ref-for-authdata-flags\u2463"}, {"id": "ref-for-authdata-flags\u2464"}, {"id": "ref-for-authdata-flags\u2465"}, {"id": "ref-for-authdata-flags\u2466"}, {"id": "ref-for-authdata-flags\u2467"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authdata-flags\u2468"}, {"id": "ref-for-authdata-flags\u2460\u24ea"}], "title": "5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}, {"refs": [{"id": "ref-for-authdata-flags\u2460\u2460"}, {"id": "ref-for-authdata-flags\u2460\u2461"}, {"id": "ref-for-authdata-flags\u2460\u2462"}, {"id": "ref-for-authdata-flags\u2460\u2463"}, {"id": "ref-for-authdata-flags\u2460\u2464"}, {"id": "ref-for-authdata-flags\u2460\u2465"}, {"id": "ref-for-authdata-flags\u2460\u2466"}, {"id": "ref-for-authdata-flags\u2460\u2467"}, {"id": "ref-for-authdata-flags\u2460\u2468"}, {"id": "ref-for-authdata-flags\u2461\u24ea"}, {"id": "ref-for-authdata-flags\u2461\u2460"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authdata-flags\u2461\u2461"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}, {"refs": [{"id": "ref-for-authdata-flags\u2461\u2462"}, {"id": "ref-for-authdata-flags\u2461\u2463"}, {"id": "ref-for-authdata-flags\u2461\u2464"}, {"id": "ref-for-authdata-flags\u2461\u2465"}, {"id": "ref-for-authdata-flags\u2461\u2466"}, {"id": "ref-for-authdata-flags\u2461\u2467"}, {"id": "ref-for-authdata-flags\u2461\u2468"}, {"id": "ref-for-authdata-flags\u2462\u24ea"}, {"id": "ref-for-authdata-flags\u2462\u2460"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-authdata-flags\u2462\u2461"}, {"id": "ref-for-authdata-flags\u2462\u2462"}, {"id": "ref-for-authdata-flags\u2462\u2463"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-authdata-flags\u2462\u2464"}, {"id": "ref-for-authdata-flags\u2462\u2465"}, {"id": "ref-for-authdata-flags\u2462\u2466"}, {"id": "ref-for-authdata-flags\u2462\u2467"}, {"id": "ref-for-authdata-flags\u2462\u2468"}, {"id": "ref-for-authdata-flags\u2463\u24ea"}, {"id": "ref-for-authdata-flags\u2463\u2460"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-flags\u2463\u2461"}, {"id": "ref-for-authdata-flags\u2463\u2462"}, {"id": "ref-for-authdata-flags\u2463\u2463"}, {"id": "ref-for-authdata-flags\u2463\u2464"}, {"id": "ref-for-authdata-flags\u2463\u2465"}, {"id": "ref-for-authdata-flags\u2463\u2466"}, {"id": "ref-for-authdata-flags\u2463\u2467"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authdata-flags\u2463\u2468"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-authdata-flags\u2464\u24ea"}], "title": "14.3. Authenticator-local Biometric Recognition"}], "external": false};
+window.dfnpanelData['authdata-flags'] = {"dfnID": "authdata-flags", "url": "#authdata-flags", "dfnText": "flags", "refSections": [{"refs": [{"id": "ref-for-authdata-flags"}, {"id": "ref-for-authdata-flags\u2460"}, {"id": "ref-for-authdata-flags\u2461"}, {"id": "ref-for-authdata-flags\u2462"}, {"id": "ref-for-authdata-flags\u2463"}, {"id": "ref-for-authdata-flags\u2464"}, {"id": "ref-for-authdata-flags\u2465"}, {"id": "ref-for-authdata-flags\u2466"}, {"id": "ref-for-authdata-flags\u2467"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authdata-flags\u2468"}, {"id": "ref-for-authdata-flags\u2460\u24ea"}], "title": "5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}, {"refs": [{"id": "ref-for-authdata-flags\u2460\u2460"}, {"id": "ref-for-authdata-flags\u2460\u2461"}, {"id": "ref-for-authdata-flags\u2460\u2462"}, {"id": "ref-for-authdata-flags\u2460\u2463"}, {"id": "ref-for-authdata-flags\u2460\u2464"}, {"id": "ref-for-authdata-flags\u2460\u2465"}, {"id": "ref-for-authdata-flags\u2460\u2466"}, {"id": "ref-for-authdata-flags\u2460\u2467"}, {"id": "ref-for-authdata-flags\u2460\u2468"}, {"id": "ref-for-authdata-flags\u2461\u24ea"}, {"id": "ref-for-authdata-flags\u2461\u2460"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authdata-flags\u2461\u2461"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}, {"refs": [{"id": "ref-for-authdata-flags\u2461\u2462"}, {"id": "ref-for-authdata-flags\u2461\u2463"}, {"id": "ref-for-authdata-flags\u2461\u2464"}, {"id": "ref-for-authdata-flags\u2461\u2465"}, {"id": "ref-for-authdata-flags\u2461\u2466"}, {"id": "ref-for-authdata-flags\u2461\u2467"}, {"id": "ref-for-authdata-flags\u2461\u2468"}, {"id": "ref-for-authdata-flags\u2462\u24ea"}, {"id": "ref-for-authdata-flags\u2462\u2460"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-authdata-flags\u2462\u2461"}, {"id": "ref-for-authdata-flags\u2462\u2462"}, {"id": "ref-for-authdata-flags\u2462\u2463"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-authdata-flags\u2462\u2464"}, {"id": "ref-for-authdata-flags\u2462\u2465"}, {"id": "ref-for-authdata-flags\u2462\u2466"}, {"id": "ref-for-authdata-flags\u2462\u2467"}, {"id": "ref-for-authdata-flags\u2462\u2468"}, {"id": "ref-for-authdata-flags\u2463\u24ea"}, {"id": "ref-for-authdata-flags\u2463\u2460"}, {"id": "ref-for-authdata-flags\u2463\u2461"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-flags\u2463\u2462"}, {"id": "ref-for-authdata-flags\u2463\u2463"}, {"id": "ref-for-authdata-flags\u2463\u2464"}, {"id": "ref-for-authdata-flags\u2463\u2465"}, {"id": "ref-for-authdata-flags\u2463\u2466"}, {"id": "ref-for-authdata-flags\u2463\u2467"}, {"id": "ref-for-authdata-flags\u2463\u2468"}, {"id": "ref-for-authdata-flags\u2464\u24ea"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authdata-flags\u2464\u2460"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-authdata-flags\u2464\u2461"}], "title": "14.3. Authenticator-local Biometric Recognition"}], "external": false};
 window.dfnpanelData['authdata-flags-up'] = {"dfnID": "authdata-flags-up", "url": "#authdata-flags-up", "dfnText": "UP", "refSections": [{"refs": [{"id": "ref-for-authdata-flags-up"}, {"id": "ref-for-authdata-flags-up\u2460"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authdata-flags-up\u2461"}], "title": "6.1.2. FIDO U2F Signature Format Compatibility"}, {"refs": [{"id": "ref-for-authdata-flags-up\u2462"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-flags-up\u2463"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
 window.dfnpanelData['authdata-flags-uv'] = {"dfnID": "authdata-flags-uv", "url": "#authdata-flags-uv", "dfnText": "UV", "refSections": [{"refs": [{"id": "ref-for-authdata-flags-uv"}, {"id": "ref-for-authdata-flags-uv\u2460"}, {"id": "ref-for-authdata-flags-uv\u2461"}, {"id": "ref-for-authdata-flags-uv\u2462"}, {"id": "ref-for-authdata-flags-uv\u2463"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authdata-flags-uv\u2464"}, {"id": "ref-for-authdata-flags-uv\u2465"}], "title": "5.8.6. User Verification Requirement Enumeration (enum UserVerificationRequirement)"}, {"refs": [{"id": "ref-for-authdata-flags-uv\u2466"}, {"id": "ref-for-authdata-flags-uv\u2467"}], "title": "6.1. Authenticator Data"}, {"refs": [{"id": "ref-for-authdata-flags-uv\u2468"}, {"id": "ref-for-authdata-flags-uv\u2460\u24ea"}, {"id": "ref-for-authdata-flags-uv\u2460\u2460"}], "title": "6.2.3. Authentication Factor Capability"}, {"refs": [{"id": "ref-for-authdata-flags-uv\u2460\u2461"}, {"id": "ref-for-authdata-flags-uv\u2460\u2462"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-flags-uv\u2460\u2463"}, {"id": "ref-for-authdata-flags-uv\u2460\u2464"}, {"id": "ref-for-authdata-flags-uv\u2460\u2465"}], "title": "7.2. Verifying an Authentication Assertion"}, {"refs": [{"id": "ref-for-authdata-flags-uv\u2460\u2466"}], "title": "10.1.4. Pseudo-random function extension (prf)"}, {"refs": [{"id": "ref-for-authdata-flags-uv\u2460\u2467"}], "title": "14.3. Authenticator-local Biometric Recognition"}], "external": false};
-window.dfnpanelData['authdata-flags-be'] = {"dfnID": "authdata-flags-be", "url": "#authdata-flags-be", "dfnText": "BE", "refSections": [{"refs": [{"id": "ref-for-authdata-flags-be"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authdata-flags-be\u2460"}, {"id": "ref-for-authdata-flags-be\u2461"}, {"id": "ref-for-authdata-flags-be\u2462"}, {"id": "ref-for-authdata-flags-be\u2463"}, {"id": "ref-for-authdata-flags-be\u2464"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-authdata-flags-be\u2465"}, {"id": "ref-for-authdata-flags-be\u2466"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-flags-be\u2467"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
-window.dfnpanelData['authdata-flags-bs'] = {"dfnID": "authdata-flags-bs", "url": "#authdata-flags-bs", "dfnText": "BS", "refSections": [{"refs": [{"id": "ref-for-authdata-flags-bs"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authdata-flags-bs\u2460"}, {"id": "ref-for-authdata-flags-bs\u2461"}, {"id": "ref-for-authdata-flags-bs\u2462"}, {"id": "ref-for-authdata-flags-bs\u2463"}, {"id": "ref-for-authdata-flags-bs\u2464"}, {"id": "ref-for-authdata-flags-bs\u2465"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-authdata-flags-bs\u2466"}, {"id": "ref-for-authdata-flags-bs\u2467"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-flags-bs\u2468"}, {"id": "ref-for-authdata-flags-bs\u2460\u24ea"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
+window.dfnpanelData['authdata-flags-be'] = {"dfnID": "authdata-flags-be", "url": "#authdata-flags-be", "dfnText": "BE", "refSections": [{"refs": [{"id": "ref-for-authdata-flags-be"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authdata-flags-be\u2460"}, {"id": "ref-for-authdata-flags-be\u2461"}, {"id": "ref-for-authdata-flags-be\u2462"}, {"id": "ref-for-authdata-flags-be\u2463"}, {"id": "ref-for-authdata-flags-be\u2464"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-authdata-flags-be\u2465"}, {"id": "ref-for-authdata-flags-be\u2466"}, {"id": "ref-for-authdata-flags-be\u2467"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-flags-be\u2468"}, {"id": "ref-for-authdata-flags-be\u2460\u24ea"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
+window.dfnpanelData['authdata-flags-bs'] = {"dfnID": "authdata-flags-bs", "url": "#authdata-flags-bs", "dfnText": "BS", "refSections": [{"refs": [{"id": "ref-for-authdata-flags-bs"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authdata-flags-bs\u2460"}, {"id": "ref-for-authdata-flags-bs\u2461"}, {"id": "ref-for-authdata-flags-bs\u2462"}, {"id": "ref-for-authdata-flags-bs\u2463"}, {"id": "ref-for-authdata-flags-bs\u2464"}, {"id": "ref-for-authdata-flags-bs\u2465"}], "title": "6.1.3. Credential Backup State"}, {"refs": [{"id": "ref-for-authdata-flags-bs\u2466"}, {"id": "ref-for-authdata-flags-bs\u2467"}, {"id": "ref-for-authdata-flags-bs\u2468"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-flags-bs\u2460\u24ea"}, {"id": "ref-for-authdata-flags-bs\u2460\u2460"}, {"id": "ref-for-authdata-flags-bs\u2460\u2461"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};
 window.dfnpanelData['authdata-flags-at'] = {"dfnID": "authdata-flags-at", "url": "#authdata-flags-at", "dfnText": "AT", "refSections": [{"refs": [{"id": "ref-for-authdata-flags-at"}, {"id": "ref-for-authdata-flags-at\u2460"}, {"id": "ref-for-authdata-flags-at\u2461"}, {"id": "ref-for-authdata-flags-at\u2462"}, {"id": "ref-for-authdata-flags-at\u2463"}], "title": "6.1. Authenticator Data"}], "external": false};
 window.dfnpanelData['authdata-flags-ed'] = {"dfnID": "authdata-flags-ed", "url": "#authdata-flags-ed", "dfnText": "ED", "refSections": [{"refs": [{"id": "ref-for-authdata-flags-ed"}, {"id": "ref-for-authdata-flags-ed\u2460"}, {"id": "ref-for-authdata-flags-ed\u2461"}], "title": "6.1. Authenticator Data"}], "external": false};
 window.dfnpanelData['authdata-signcount'] = {"dfnID": "authdata-signcount", "url": "#authdata-signcount", "dfnText": "signCount", "refSections": [{"refs": [{"id": "ref-for-authdata-signcount"}], "title": "4. Terminology"}, {"refs": [{"id": "ref-for-authdata-signcount\u2460"}, {"id": "ref-for-authdata-signcount\u2461"}, {"id": "ref-for-authdata-signcount\u2462"}, {"id": "ref-for-authdata-signcount\u2463"}], "title": "6.1.1. Signature Counter Considerations"}, {"refs": [{"id": "ref-for-authdata-signcount\u2464"}], "title": "7.1. Registering a New Credential"}, {"refs": [{"id": "ref-for-authdata-signcount\u2465"}, {"id": "ref-for-authdata-signcount\u2466"}, {"id": "ref-for-authdata-signcount\u2467"}], "title": "7.2. Verifying an Authentication Assertion"}], "external": false};