Re: [webauthn] Spec should not mandate behavior of server

I agree that we need to continue specifying any security-critical server behaviors.  We can decide to move them into their section if people feel strongly about this but I would object to removing them entirely.

-- 
GitHub Notification of comment by selfissued
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/88#issuecomment-291667072 using your GitHub account

Received on Tuesday, 4 April 2017 23:08:46 UTC