Re: [webauthn] Move account argument to options

@vijaybh wrote:
> What should an authenticator with onboard storage do if a caller 
creates a credential without this option, then asks for an assertion 
without specifying a credential ID?

by "without specifying a credential ID", you mean without specifying 
an `options.allowList` (which contains ScopedCredentialDescriptions 
containing cred ID), yes?

I"m tending to agree with @vijaybh here. 

-- 
GitHub Notification of comment by equalsJeffH
Please view or discuss this issue at 
https://github.com/w3c/webauthn/issues/219#issuecomment-250003100 
using your GitHub account

Received on Tuesday, 27 September 2016 21:23:04 UTC