Re: [webauthn] address empty allowlist in 'use existing cred' alg, fixes #387

When thinking about merge/no-merge decisions, I'd have us ask the question "Is what's in the PR better than what's in the master or is it in some ways worse?"  If it's strictly better, I'd do the merge, even if we think the functionality might be subject to future feedback from implementers.  If it demonstrably makes some things worse, that's an argument to wait.  But if it only makes things better, I'd rather that we incorporated the good work by @jyasskin and @equalsJeffH and not leave it languishing.

-- 
GitHub Notification of comment by selfissued
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/427#issuecomment-298120831 using your GitHub account

Received on Friday, 28 April 2017 22:27:18 UTC