[webauthn] The description for creating a new credential has the browser prompting the user for consent

• From: Alexei Czeskis via GitHub <sysbot+gh@w3.org>
• Date: Fri, 08 Sep 2017 18:37:47 +0000
• To: public-webauthn@w3.org
• Message-ID: <issues.opened-256337612-1504895857-sysbot+gh@w3.org>

leshi has just created a new issue for https://github.com/w3c/webauthn:

== The description for creating a new credential has the browser prompting the user for consent ==
> 4.1.3. Create a new credential - PublicKeyCredential’s [[Create]](options) method
> 
> PublicKeyCredential's interface object's implementation of the [[Create]](options) method allows scripts to call navigator.credentials.create() to request the creation of a new credential key pair and PublicKeyCredential, managed by an authenticator. The user agent will prompt the user for consent. On success, the returned promise will be resolved with a PublicKeyCredential containing an AuthenticatorAttestationResponse object.

Seems to imply that the browser will throw a prompt in the user's face. Let's remove this sentence, we talk about getting consent (and all the complications of how authenticators do this) later in the spec.

Please view or discuss this issue at https://github.com/w3c/webauthn/issues/552 using your GitHub account

Received on Friday, 8 September 2017 18:37:41 UTC