Re: [webauthn] Where is the code implementation for roaming authenticators? (#1221)

I would prefer that my users not have to go out and buy a physical security key, which most often would be just left in a workstation and is by design insecure (unless of course you also use usernames and passwords, which you were trying to avoid in the first place).

Almost everyone has a mobile phone with BLE.  I think that WebAuthn would take off if there was a simple reference implementation that would allow a user's mobile phone to be a roaming authenticator.  **Why isn't there a reference implementation for something clearly stated in the W3C recommendation?**

Are there any code examples available anywhere for creating a WebAuthn roaming authenticator on a mobile device and making it available by Bluetooth Low Energy to a Web App running in Chrome? 

-- 
GitHub Notification of comment by mduffy215
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1221#issuecomment-495481306 using your GitHub account

Received on Friday, 24 May 2019 05:51:45 UTC