Re: [webauthn] double check language regarding requiring authorization gesture (#1215)

We've defined the term "authorization gesture" to mean any kind of human confirmation, including a test of user presence [which is still required in authenticatorMakeCredential][amc], so the claim

>since this specification requires an authorization gesture to create any credentials,

is still true.

However we could tie things together better by rephrasing the authenticator operations a bit, since they currently don't reference the "authorization gesture" term at all.

[amc]: https://www.w3.org/TR/webauthn/#op-makecred-step-user-consent

-- 
GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1215#issuecomment-491306883 using your GitHub account

Received on Friday, 10 May 2019 14:22:24 UTC