Re: [webauthn] callerOrigin isn't actually the origin of the caller; it's the origin of the callee

> ok, so in your example above, window1, window2, window3 all need to 
be same origin, yes?

I believe same origin-domain, but yeah, basically :).

> If so, then it is sounding like we can ought to change 
makeCredential() step 3 from..

"relevant settings object of this `WebAuthentication` object" to be 
precise, but yep!

-- 
GitHub Notification of comment by domenic
Please view or discuss this issue at 
https://github.com/w3c/webauthn/issues/271#issuecomment-270942011 
using your GitHub account

Received on Friday, 6 January 2017 16:28:42 UTC