- From: Adam Langley via GitHub <sysbot+gh@w3.org>
- Date: Sat, 01 Aug 2020 16:23:36 +0000
- To: public-webauthn@w3.org
> If there is no pin or uv provisioned then you can make with rk=true and it will work. I'm assuming that discoverable credentials are only useful when they can provide two factors in themselves. The non-UV, empty-allow-list flow is already something that Chrome doesn't support. Thus creating a discoverable credential without UV doesn't seem useful on the web. From that point, the question that Christiaan is raising is how hard we should push to create a discoverable credential. If there's variation on this point between user agents then that's going to be a little weird for RPs so, if we can agree and stick a note in the spec, so much the better. -- GitHub Notification of comment by agl Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1463#issuecomment-667555217 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Saturday, 1 August 2020 16:23:37 UTC