Re: [webauthn] Enforce specific user verification methods (#1211)

Typically the RP doesn't have sufficient knowledge of the authenticator's capabilities to make intelligent choices.  Having the RP try to do this could result in degraded user experiences.  We should discourage RPs attempting to control the authenticator's behaviors.

-- 
GitHub Notification of comment by selfissued
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1211#issuecomment-501433498 using your GitHub account

Received on Wednesday, 12 June 2019 20:01:11 UTC