Re: [webauthn] Trim unnecessary step from appId extension

Talked over this more with agl@ and uncovered some confusion.

The wording under https://w3c.github.io/webauthn/#extensions refers to 'registration extensions' and 'authentication extensions'. It's unclear, then, whether 'AuthenticationClientExtensionInputs' refers to 'authentication extensions' as distinct from 'registration extensions', or authentication as in "web authentication".

1) if the former, this implies we should also have 'RegistrationClientExtensionInputs'. In which case, this PR is still valid, the addition of RegistrationClientExtensionInputs in #909 is valid, and other registration extensions should be changed to use it.

2) if the latter, it might be better to call the input "ClientExtensionInputs". In which case, this PR is unnecessary, I'll adjust #909 to use 'AuthenticationClientExtensionInputs', and we should consider if there's any purpose in having wording that distinguishes 'registration extensions' from 'authentication extensions'.

-- 
GitHub Notification of comment by kpaulh
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/910#issuecomment-389605576 using your GitHub account

Received on Wednesday, 16 May 2018 17:43:21 UTC