Re: [webauthn] Clarify meaning of UVI

One issue with the above - in a lot of cases, the biometric reference 
data itself is not stable over time. Lots of implementations will 
refine the reference data after each successful identification, to 
track small changes in the biometric over time and reduce false 
rejects (e.g. as your hair grows longer or grayer, the skin on your 
fingers gets thinner and dryer, etc.). So in practice rawUVI would not
 be stable either and this would be asking to create some kind of 
record GUID for each biometric record. This turns out to be 
non-trivial to do well, because the record identifier would then be 
disconnected from the reference data leading to all sorts of corner 
cases.

-- 
GitHub Notification of comment by vijaybh
Please view or discuss this issue at 
https://github.com/w3c/webauthn/issues/156#issuecomment-237902622 
using your GitHub account

Received on Friday, 5 August 2016 16:51:26 UTC