[JoelJacobson]

Fun fact: CBOR is used within the WebAuthn (Passkey) protocol.

To do Passkey-verification server-side, I had to implement a pure-SQL/PLpgSQL CBOR parser, out of fear that a C-implementation could crash the PostgreSQL server: https://github.com/truthly/pg-cbor

[teatro]

That’s why I’m wondering if there is an actual CBOR encoder in the browsers? I mean, there must be one, or am I wrong?

[esbranson]

Yes.[1][2]

[1] https://source.chromium.org/chromium/chromium/src/+/main:com...

[2] https://source.chromium.org/chromium/chromium/src/+/main:dev...

[esbranson]

And .Net 5 circa 2020 added support for CBOR. ASP.NET ended up being a good choice for an experimental WebAuthn server for FedCM and DID experiments.