Re: [webauthn] imageURL privacy

@leshi  From what I read, the account chooser UI is better because it incorporates the image. @selfissued and other identity folks can comment more on the UI. 

I am not sure if we are actually gaining privacy. At the end of the day, image is just another piece of data. The RP already supplies the name of the user, which can be used to identify the user. Comparatively image is probably more difficult to be use for privacy attacks. In the meantime, adding icon adds a lot of UX improvement (from what I heard). 


-- 
GitHub Notification of comment by AngeloKai
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/139#issuecomment-329908365 using your GitHub account

Received on Friday, 15 September 2017 21:27:42 UTC