Re: Fwd: "How to FIDO: A guide for relying parties" (was: Multiple authenticator draft)

Some early feedback: I think it would be useful if the overview of the
document had a high-level view of how the various flows relate to one
other (which ones are required no matter what if you're going to use
WebAuthn, which dependencies exist among flows, if one adds more
"security" to another, etc)

Some indication as to what hardware (or hardware + OS version) the
end-user is required to have to be put into a given flow would also be a
useful way to navigate which flows might applicable to a given developer.

Dom

Le 13/05/2020 à 23:17, Jeff Hodges a écrit :
> 
> Hi folks, 
> 
> Here's our "How to FIDO" doc.  Folks who wish to comment may use the
> below link -- we'll have to grant access individually (apologies for the
> extra friction):
> 
> How to FIDO: Employing FIDO authenticators and the WebAuthn API in your
> sign-in flows: A guide for relying parties
> <https://docs.google.com/document/d/1cYu904oU2KNhyAjZNUiS4Gb_PpDewKpIb8l7xRcGdm0/>
> <https://docs.google.com/document/d/1cYu904oU2KNhyAjZNUiS4Gb_PpDewKpIb8l7xRcGdm0/>
> Also, a PDF copy is attached below and
> here: https://lists.w3.org/Archives/Public/public-webauthn/2020May/att-0015/How-to-FIDO-2020-04-07.pdf
> 
> HTH,
> 
> =JeffH
> 
> see also Shane's message:
> https://lists.w3.org/Archives/Public/public-webauthn-adoption/2020May/att-0004/00-part 
> re  https://howtofido.securitypoc.com
> 

Received on Monday, 18 May 2020 16:43:28 UTC