Re: [webauthn] Add example of different RP ID and AppID (#1165)

Would https://accounts.example.com/appId be a better sample AppID than https://accounts.example.com?
Both might be valid, but the latter makes it awkward to serve a TrustedFacetList from that address, which is necessary to authorise mobile apps and sibling domains to share the credentials.

-- 
GitHub Notification of comment by manger
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/1165#issuecomment-469915022 using your GitHub account

Received on Wednesday, 6 March 2019 00:26:38 UTC