Re: [webauthn] What does "the extension was acted upon" mean for the AppID extension?

This boolean always returning true whether appid was used or RPID was used makes no sense to me. 

This behaviour makes this boolean meaningless and this behavior is not intuitive and less efficient. Then RP will need to have a retry verification logic and try to deduce what happened which results in less clean approach and results in more error prone code, IMO. 

-- 
GitHub Notification of comment by akshayku
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/982#issuecomment-404188747 using your GitHub account

Received on Wednesday, 11 July 2018 14:25:34 UTC