W3C home > Mailing lists > Public > public-webauthn@w3.org > September 2016

Re: [webauthn] Move account argument to options

From: bifurcation via GitHub <sysbot+gh@w3.org>
Date: Wed, 28 Sep 2016 06:39:51 +0000
To: public-webauthn@w3.org
Message-ID: <issue_comment.created-250084490-1475044790-sysbot+gh@w3.org>
@vijaybh It seems like you're arguing that the web site has to make 
things pretty.  The account info just tells the UA what to put in a 
chooser in order to make it easier for a user to understand (aside: 
note that this raises the possibility of misdirection).   If the RP 
doesn't provide this information, the UA can still present a list of 
credentials associated with this origin (probably just one in 
practice) or choose to omit credentials that have no pretty UX info 
attached.

ISTM that your concern points more toward removing `allowList` from 
optional to required than to requiring `account`.  Filed #221 for 
this.

-- 
GitHub Notification of comment by bifurcation
Please view or discuss this issue at 
https://github.com/w3c/webauthn/issues/219#issuecomment-250084490 
using your GitHub account
Received on Wednesday, 28 September 2016 06:39:59 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:58:26 UTC