Re: [webauthn] Consider dropping requirement for TUP on create()

1. It depends on the boundary as you pointed out in Sydney, so it can be simple or complicated. but the basic definition would be that the internal OS protocols are used and not CTAP
2. Agree there should be some clarification 
3. There is no violation as the FIDO conformance tests would be require user consent

@akshayku @idamlaj @christiaanbrand @rlin1  Looks like support to wrap this up as making this optional

-- 
GitHub Notification of comment by nadalin
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/564#issuecomment-334002023 using your GitHub account

Received on Tuesday, 3 October 2017 22:52:17 UTC