All that aside I agree with @akshayku and @idamlaj that optional user presence seems dangerous, but I could be convinced if there's a concrete use case. The one I've heard so far is to enable a "heartbeat" polling mechanism to detect if the user unplugs the authenticator; is that the main one being considered? -- GitHub Notification of comment by emlun Please view or discuss this issue at https://github.com/w3c/webauthn/issues/629#issuecomment-336589810 using your GitHub accountReceived on Friday, 13 October 2017 23:27:32 UTC
This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 07:26:28 UTC