Re: [webauthn] Add “appidExclude” extension. (#1244)

Perhaps we should define a proper term for "legacy credential", and use that in both this and the appid extension? I'm thinking something like:

- **AppID Credential:** A credential scoped to a FIDO AppID, unlike an _RP ID credential_ which is scoped to an RP ID. AppID credentials can be created via the FIDO U2F JavaScript API and cannot be created via the WebAuthn API, but the `appid` extension enables using them to generate WebAuthn assertion signatures.
- **RP ID Credential:** A credential scoped to an RP ID. This is the default kind of credential in WebAuthn, and is the only kind of credential that can be created via the WebAuthn API. See also _AppID credential_.

-- 
GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/1244#issuecomment-506428352 using your GitHub account

Received on Thursday, 27 June 2019 16:57:45 UTC