Re: Account -> Options; ScopedCredentialParameters

I agree wrt 'account' -- sounds like a good idea.

I kind of like `cryptoParameters` as a name. it forces our hand into trying
to not define a rich policy language.  But `constraints` is fine too.


Thanks!
-Alexei

*____**_**__**_**_**_**_**_**_**_**_**_*

 . Alexei Czeskis .:. Securineer .:. 317.698.4740 .

On Fri, Sep 23, 2016 at 12:30 PM, Richard Barnes <rbarnes@mozilla.com>
wrote:

> Hey folks,
>
> I can't remember if we talked about this before.  Would it make sense to
> move the `account` argument to `makeCredential` into the `options`
> dictionary?  It seems like there are at least some credential types that
> don't require it (e.g., U2F credentials), and it makes the interface a bit
> simpler.
>
> I also wonder whether given the discussion this week it might make sense
> to change the `cryptoParameters` argument to something like `constraints`,
> as is done in getUserMedia [1], as a general "These are the types of
> credential I support" field.  Might not be necessary if we don't want to
> allow the caller to specify anything more than we do now, but might be a
> way to address some of the concerns about, e.g., attestation types, that
> were raised this week.
>
> Thanks,
> --Richard
>
> [1] https://www.w3.org/TR/mediacapture-streams/#constraints
>

Received on Friday, 23 September 2016 19:43:29 UTC