[webauthn] new commits pushed by akshayku

The following commits were just pushed by akshayku to https://github.com/w3c/webauthn:

* Add privacy considerations about credential IDs (#1250)

* Apply suggestions from code review

Co-Authored-By: =JeffH <jdhodges@google.com>

* Fix whitespace

* Suggest session cookie as mitigation

* Fix pluralisation

* Add note of identifying authenticator owner from credential IDs

* Address @manger's comment about 'single-factor'

* Make reason for credID privacy leak more precise and general

* Focus privacy leak more on second-factor than non-resident keys
  by Emil Lundberg
https://github.com/w3c/webauthn/commit/c7e44f6f91632b9847394d61ed3d6ba8fb2128d4

Received on Wednesday, 9 October 2019 19:06:31 UTC