Re: [webauthn] Transaction Authorization provides a simple and effective method to implement the PSD2 Dynamic Linking requirement. (#1396)

@equalsJeffH:
a) What exactly is the potential harm that could happen when displaying arbitrary strings?
b) Would a "framing" be sifficient, e.g. Browser displays "The website acme.com asks you to confirm the following transaction: [transaction string as provided by RP] <Reject> <Accept>?

-- 
GitHub Notification of comment by rlin1
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1396#issuecomment-607696859 using your GitHub account

Received on Thursday, 2 April 2020 08:22:55 UTC