Re: [webauthn] What is the point of `allowCredentials`?

I'd say our interpretation is that of @herrjemand's response - allowCredentials is necessary for the authenticator to make an assertion for second-factor use cases, and that the list could be used to influence UX, but that is not its primary purpose.

-- 
GitHub Notification of comment by kpaulh
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/867#issuecomment-384392087 using your GitHub account

Received on Wednesday, 25 April 2018 18:40:51 UTC