Re: [webauthn] The user-verification default of “preferred” is catching most sites out. (#1253) from =JeffH via GitHub on 2019-07-13 (public-webauthn@w3.org from July 2019)

From: =JeffH via GitHub <sysbot+gh@w3.org>
Date: Sat, 13 Jul 2019 00:37:02 +0000
To: public-webauthn@w3.org
Message-ID: <issue_comment.created-511071634-1562978221-sysbot+gh@w3.org>

See also: https://chromium.googlesource.com/chromium/src/+/master/content/browser/webauth/uv_preferred.md

Note this observation therein: There is not currently a way in WebAuthn to express that a site would like user verification if it's low-cost for the user so that later reauthentication may use WebAuthn rather than a password.

...that may merit it's own (related) issue.

-- 
GitHub Notification of comment by equalsJeffH
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1253#issuecomment-511071634 using your GitHub account

Received on Saturday, 13 July 2019 00:37:07 UTC