FYI: spec violation in current MDS data causing parser errors

The spec clearly states that authenticatorVersion is an unsigned short (i.e. a UInt16) but as of recently new entries from Yubico are using values well north of 2^16.

Example is AAGUID 2fc0579f-8113-47ea-b116-bb5a8db9202a which is for the YubiKey 5 NFC version 5.2.x - it looks like they’ve just padded out the firmware version to create the authenticatorVersion value.

Error initialising MDS client 'Fido2MetadataServiceRepository'
Newtonsoft.Json.JsonSerializationException: Error converting value 502000 to type 'System.UInt16'. Path 'authenticatorVersion', line 1, position 1337.
 ---> System.OverflowException: Value was either too large or too small for a UInt16.

I wonder if it’s worth just changing the model in the lib to accomodate this (i.e. just bump it up to a UInt32).

Not the first spec violation I’ve encountered with that service. Does anyone have a contact this can be reported to?

[aseigler]

No, we should not change the lib. This is definitely a typo in the MDS data that the vendor must fix, it is clearly against spec.

[aseigler]

Pretty sure this is non-issue now, particularly with the MDS3 changes.