Re: [w3ctag/design-reviews] Incubation: Email Verification Protocol (Issue #1169)

dickhardt left a comment (w3ctag/design-reviews#1169)

> A thought occurs: will sites want to use this in place of passkeys for login?

I would suspect so for simpler sites. Passkeys have many sharp edges -- and sites want a memorable identifier -- which passkeys don't provide today. 

A WebAuthN interaction between the browser and the issuer as part of EVP I think provides a fantastic step up for simpler sites. The issuer knows the credentials it supports for the email address provided -- and the site gets a verified email and the security of passkeys without having to directly support passkeys. 

A browser integrated with an issuer can do the same thing to provide a directed email address to the site and use a passkey for authenticating the user transparent to the site as Sam mentions above. 

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/1169#issuecomment-3664692165
You are receiving this because you are subscribed to this thread.

Message ID: <w3ctag/design-reviews/issues/1169/3664692165@github.com>