- From: Jeffrey Yasskin <notifications@github.com>
- Date: Fri, 10 Apr 2026 06:44:14 -0700
- To: w3ctag/design-reviews <design-reviews@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Friday, 10 April 2026 13:44:19 UTC
jyasskin left a comment (w3ctag/design-reviews#1213) We discussed this in two breakouts, and the TAG agrees that we'd like work to continue on Capability Delegation to act as infrastructure for these several related areas. We agree with @marcoscaceres that we see potential abuse if each new iframe gets a call without activation. We think that WebAuthn needs to reconsider its design if it's open to this abuse. -- Reply to this email directly or view it on GitHub: https://github.com/w3ctag/design-reviews/issues/1213#issuecomment-4224168664 You are receiving this because you are subscribed to this thread. Message ID: <w3ctag/design-reviews/issues/1213/4224168664@github.com>
Received on Friday, 10 April 2026 13:44:19 UTC