Re: [webauthn] overall security considerations section or document

an [overall security considerations section](https://w3c.github.io/webauthn/#security-considerations) was recently added to the spec via PR #681.  however, IMO, to close this issue it ought to be enhanced to explain that the present web authn sec cons are incomplete, update the ref to [[FidoSecRef]]  to a newer version, and to please refer to [[FidoSecRef]] for further info.  we could/should then open another issue regarding having thorough webauthn-specific security considerations.

WDYT?


-- 
GitHub Notification of comment by equalsJeffH
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/322#issuecomment-347936349 using your GitHub account

Received on Wednesday, 29 November 2017 17:34:18 UTC