Re: [webauthn] Privacy concerns with blacklist/whitelist

Oh, those steps are still useful. We perform them if the user denies consent. The distinction I meant is that Chrome will not immediately return if there are no credentials in the whitelist present.

-- 
GitHub Notification of comment by kpaulh
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/184#issuecomment-344086784 using your GitHub account

Received on Monday, 13 November 2017 22:53:47 UTC