Re: [webauthn] WIP: Authenticator taxonomy

> Is there someplace we can refer to for "authentication factor" and the related terms (known/possessed/biometric factor) instead of defining them in the spec?

yep, NIST SP800-63-3: e.g., https://pages.nist.gov/800-63-3/sp800-63-3.html#af

See also, fyi/fwiw: http://www.garlic.com/~lynn/secure.htm


-- 
GitHub Notification of comment by equalsJeffH
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/842#issuecomment-373456330 using your GitHub account

Received on Thursday, 15 March 2018 17:21:10 UTC