ACTION-2053: Authentication is important but...

I reviewed the spec at https://www.w3.org/tr/webauthn/

There is a lot in there.  It supports the integration of external
authentication mechanisms (e.g., biometrics, Google Authenticator on a
phone / watch, etc.)  Not sure how to think about the A11Y concerns here
though.  Basically there is no UI component per se.  Instead there is an
API that allows the invocation of platform-specific mechanisms.  Those
clearly MUST be accessible, but it is not clear to me how we would require
or enforce that through this spec.

P.S. Discussed at APA Meeting on 3 August.  Notes in the Action Item in
Tracker.

-- 
Shane McCarron
Projects Manager, Spec-Ops