FIDO/WebAuthn Payment Proposal

Since a not yet published SPC draft is supposed to be discussed at https://github.com/w3c/webpayments/wiki/Agenda-FTF2021 I took the liberty providing my take on the matter:
https://github.com/w3c/webauthn/issues/1570

No, this is NOT a "rehash" of Saturn, the proposal only borrows a very small part of Saturn: Encrypted Authorizations. This brings a bunch of potentially useful things to the table such as:
- Simplified flow (eliminates authentication challenge data)
- Improved privacy (no PII to external actors)
- Universality (works with any account based system)

thanx,
Anders

Received on Wednesday, 17 February 2021 05:41:40 UTC