Re: [webauthn] Enforce specific user verification methods (#1211)

@emlun For UX point of view, RP really cares about such features, especially for mobile cases.
If we fully adopt WebAuthn for all authentication, it makes sense to leverage WebAuthn including such authenticator's fallback.
But, even we are adopting WebAuthn now, still we have fallbacks or alternative authentication methods since we all know that it takes time to replace old authentication (which is not secure and usable) with WebAuthn and there are cases where WebAuthn does not work.
The thing is that the client never know the RP's context without explicit information.


-- 
GitHub Notification of comment by Kieun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1211#issuecomment-502633821 using your GitHub account

Received on Monday, 17 June 2019 10:51:38 UTC