[nmadden]

CBOR is basically a fork of MsgPack. I prefer the original - it’s simpler and there are more high-quality implementations available.

[jpc0]

CBOR is actively used in the WebAuthN spec (passkeys) so browsers ship with en implementation... And if you intend to support it even via a library you will be shipping an implementation as well.

https://www.w3.org/TR/webauthn-2/#sctn-conforming-all-classe...

[camgunz]

Disclaimer: I wrote and maintain a MessagePack implementation.

Reading through this, it looks like they toss out indefinite length values, "canonicalization", and tags, making it essentially MP (MP does have extension types, I should say).

https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-cl...

[throw5959]

Which Web API can encode and decode CBOR? I'm not aware of any, and unless I'm mistaken you will need to ship your own implementation in any case.