Both are awkward in that I could reasonably expect to exceed them in the lifetime of a hardware authenticator. The ideal number would be infinite and is in fac

Both are awkward in that I could reasonably expect to exceed them in the lifetime of a hardware authenticator. The ideal number would be infinite and is in fact very achievable with a very small API modification, but alas, the WebAuthN working group didn't consider it necessary: https://github.com/w3c/webauthn/issues/1822 https://github.com/w3c/webauthn/issues/1822