Re: [webauthn] callerOrigin isn't actually the origin of the caller; it's the origin of the callee

ok, so in your example above, window1, window2, window3 all need to be
 [same origin](https://html.spec.whatwg.org/#same-origin), yes?

If so, then it is sounding like we can ought to change 
makeCredential() step 3 from..
> Set callerOrigin to the current settings object’s origin. ...

..to be..
> Set callerOrigin to the [relevant settings 
object](https://html.spec.whatwg.org/#relevant-settings-object)’s 
origin. ...

..?

-- 
GitHub Notification of comment by equalsJeffH
Please view or discuss this issue at 
https://github.com/w3c/webauthn/issues/271#issuecomment-270938895 
using your GitHub account

Received on Friday, 6 January 2017 16:15:32 UTC