Allow hashes as credential IDs.

w3c · Oct 25, 2017 · f1f9a07 · f1f9a07
1 parent 6f6d884
commit f1f9a07
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/index.bs b/index.bs
@@ -343,7 +343,7 @@ The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "S
 :: A probabilistically-unique [=byte sequence=] identifying a [=public key credential source=].
 
     Credential IDs are generated by [=authenticators=] in two forms:
-    1. At least 128 random bits, or
+    1. Bytes with at least 100 bits of entropy, or
     1. The [=public key credential source=], without its [=public key credential source/id=] item, encrypted so only the owning
         authenticator can decrypt it.