Allow hashes as credential IDs.

w3c · Oct 23, 2017 · 493dd3c · 493dd3c
1 parent bade774
commit 493dd3c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/index.bs b/index.bs
@@ -343,7 +343,7 @@ The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "S
 :: A probabilistically-unique [=byte sequence=] identifying a [=public key credential source=].
 
     Credential IDs are generated by [=authenticators=] in two forms:
-    1. At least 128 random bits, or
+    1. Bytes with at least 100 bits of entropy, or
     1. The [=public key credential source=], without its [=public key credential source/id=] item, encrypted so only the owning
         authenticator can decrypt it.