Re: [webauthn] #getAssertion alg needs to pass authenticator selection requirements to authenticatorGetAssertion operation

Is there a big enough difference between `NotRequired` and `AuthenticatorBehavior` to be worth making this an enumeration instead of a Boolean flag?

- `required: true` would be equivalent to `Required`
- `required: false` would let the platform/authenticator do whatever it wants, but with the knowledge that UV is not required. It would probably choose to not ask for UV, or perhaps ask for UV but allow skipping it, or in some cases ignore the flag and ask anyway.
- Unspecified would be much the same as `required: false`, except the platform is probably more likely to ask for UV than not.

-- 
GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/644#issuecomment-341657928 using your GitHub account

Received on Friday, 3 November 2017 09:43:50 UTC