- From: bifurcation via GitHub <sysbot+gh@w3.org>
- Date: Wed, 28 Sep 2016 06:39:51 +0000
- To: public-webauthn@w3.org
@vijaybh It seems like you're arguing that the web site has to make things pretty. The account info just tells the UA what to put in a chooser in order to make it easier for a user to understand (aside: note that this raises the possibility of misdirection). If the RP doesn't provide this information, the UA can still present a list of credentials associated with this origin (probably just one in practice) or choose to omit credentials that have no pretty UX info attached. ISTM that your concern points more toward removing `allowList` from optional to required than to requiring `account`. Filed #221 for this. -- GitHub Notification of comment by bifurcation Please view or discuss this issue at https://github.com/w3c/webauthn/issues/219#issuecomment-250084490 using your GitHub account
Received on Wednesday, 28 September 2016 06:39:59 UTC