Re: [webauthn] Privacy across Account IDs

Doesn't that just create another attack where the bad guy can find out
 which credential IDs map to which account IDs?

I think you express a valid concern BTW, just trying to figure out if 
there is any way to solve it without just displacing the problem.

-- 
GitHub Notification of comment by vijaybh
Please view or discuss this issue at 
https://github.com/w3c/webauthn/issues/204#issuecomment-247754716 
using your GitHub account

Received on Saturday, 17 September 2016 07:19:17 UTC