Re: [webauthn] Include an AuthenticatorTransport when creating a new credential.

> But authenticators don't tell what transports it support in authenticatorGetInfo. So platform has no idea how to pass that information to the RP.

For now we can extract it from the attestation certificate, since it's wedged in there for RPs already. Since one of the goals is to guide the interface of the RP, if the client has no information, its best guess would be to include the transport that it actually used on the basis that the user will probably use that same mechanism again.

-- 
GitHub Notification of comment by agl
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/882#issuecomment-386049154 using your GitHub account

Received on Wednesday, 2 May 2018 17:03:32 UTC