W3C home > Mailing lists > Public > public-webauthn@w3.org > October 2018

Re: [webauthn] Clarify description of compliant authenticators in Introduction

From: Rolf Lindemann via GitHub <sysbot+gh@w3.org>
Date: Mon, 22 Oct 2018 18:30:01 +0000
To: public-webauthn@w3.org
Message-ID: <issue_comment.created-431810512-1540208459-sysbot+gh@w3.org>
The current master already has the following paragraph:
"Broadly, compliant authenticators protect public key credentials, and interact with user agents to implement the Web Authentication API. Some authenticators MAY run on the same client device (e.g., smart phone, tablet, desktop PC) as the user agent is running on. For instance, such an authenticator might consist of a Trusted Execution Environment (TEE) applet, a Trusted Platform Module (TPM), or a Secure Element (SE) integrated into the client device in conjunction with some means for user verification, along with appropriate driver software to mediate access to these components' functionality. Other authenticators MAY operate autonomously from the client device running the user agent, and be accessed over a transport such as Universal Serial Bus (USB), Bluetooth Low Energy (BLE) or Near Field Communications (NFC)"

This paragraph doesn't explicitly call-out the case (a) as mentioned in the first comment.

GitHub Notification of comment by rlin1
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1096#issuecomment-431810512 using your GitHub account
Received on Monday, 22 October 2018 18:30:03 UTC

This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 07:26:35 UTC