Re: [webauthn] What's this SPEC for?

> Then the credential won't work anymore.

If it's like this. Why not use a much simpler way for authentication.

1. user generate a uuid as his/her identify on the whole www net.
2. browser give an api `generate_identity = () => md5(user.uuid + location.host)`.
3. website javascript run `const identity = generate_identity()`... whoever has the identity has the account.

- websites don't know each other since they can only get the md5 result.

Well, things will be better if websites can change their domain.

-- 
GitHub Notification of comment by xialvjun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/820#issuecomment-368723457 using your GitHub account

Received on Tuesday, 27 February 2018 02:19:28 UTC