Re: [webauthn] Divide Security/Privacy Considerations into subsections by audience? (#1039)

One thing that confused me for a moment was the disconnect between these sections:
- https://www.w3.org/TR/webauthn/Overview.html#user-verification
- https://www.w3.org/TR/webauthn/Overview.html#sec-biometric-privacy

The biometric section covers only a subset of the user verification section, but it's much more easily found by skimming the table of contents. This may lead a casual reader to wonder whether only biometrics are done locally but a PIN is shared with the RP.

-- 
GitHub Notification of comment by bdewater
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1039#issuecomment-502467299 using your GitHub account

Received on Sunday, 16 June 2019 16:40:30 UTC