Re: [webauthn] Consider rewording restrictions around origin (#1297)

> As discussed in the webauthn f2f 20-Sep-2019 -- we probably ought to put a Note: in the RP assertion validation rules that points the RP dev's to whichever platform rules for assertion validation is appropriate, eg, Android, Windows, etc...

The current PR adds to the Note in the RP definition, which in turn is referenced by the validation steps for both credential creation and assertion. I don't see any value in enumerating specific platform vendors at the moment since this is likely to change over time.

-- 
GitHub Notification of comment by sbweeden
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1297#issuecomment-544754268 using your GitHub account

Received on Monday, 21 October 2019 23:48:39 UTC