Re: [webauthn] Clarify WebAuthn spec to allow us to return an error to RP when it makes sense

I agree this requirement can be relaxed - basically, replace "MUST NOT return NotAllowedError before timeout" with "MUST NOT return NotAllowedError before timeout or user prompt".

@nadalin Would relaxing the requirement like that be a breaking normative change?

-- 
GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/953#issuecomment-398102306 using your GitHub account

Received on Monday, 18 June 2018 15:51:39 UTC