Re: [webauthn] Clarify relation between requireUserVerification values for MakeCredential and GetAssertion (#1305)

From the call of 2019-10-02: seems that we should remove the referenced note as it's not the case that we can ensure that the same human who is verified at assertion time is the human who registered a credential.

We may also want clarity on the behaviour of mismatched UV at registration and assertion time.

-- 
GitHub Notification of comment by agl
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1305#issuecomment-537647197 using your GitHub account

Received on Wednesday, 2 October 2019 19:38:41 UTC