Re: [webauthn] isUserVerifyingPlatformAuthenticatorAvailable() timeout really 10 minutes?

Speaking for Christiaan since he's OOO - yes, we do intend to remove the confirmation prompt for the usability reasons emlun@ and @equalsJeffH noted above. He can correct me when he gets back, but last I heard Chrome is okay with leaking the bit.

(And If I recall correctly, the initial wording was vaguely written with 'suggestions' because the browser vendors weren't in total agreement with regards to the timeout and consent prompts. Since no one was actively implementing this, we were pretty hand-wavey with it.)

-- 
GitHub Notification of comment by kpaulh
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/575#issuecomment-393233762 using your GitHub account

Received on Wednesday, 30 May 2018 16:50:20 UTC