W3C home > Mailing lists > Public > public-webauthn@w3.org > June 2018

Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop?

From: roblapp via GitHub <sysbot+gh@w3.org>
Date: Wed, 20 Jun 2018 09:56:27 +0000
To: public-webauthn@w3.org
Message-ID: <issue_comment.created-398693477-1529488585-sysbot+gh@w3.org>
@emlun Yes it does make sense. Thank your answer. My company wanted me to see if we could/should implement this new specification. However, our main use case is that a user is using our software on a machine other than their smart phone (laptop or desktop) but would want to be able to authenticate with either a Yubikey (or similar) or their smart phone. But it sounds like the main use cases the specification cover are:

1) The user is using a web application on their smart phone. they then authenticate using the smart phone.

2) The user is using a web application on  a laptop. They then authenticate using a Yubikey or other similar device.

I have not seen a use case where the web application is running in a browser on a laptop/desktop but they use their phone as the authenticator. And from your answer it sounds like you don't know anyone who is doing that (a red flag, perhaps). Is my understanding correct?

GitHub Notification of comment by roblapp
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/954#issuecomment-398693477 using your GitHub account
Received on Wednesday, 20 June 2018 09:56:31 UTC

This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 07:26:33 UTC