Re: [webauthn] How "preferred" is a "preferred" resident key (#1463)

> agl, override it to what exactly?

uv=discouraged, rk=preferred would, if discoverable credentials can be created on the selected authenticator, be treated like uv=required, rk=required. That way a site can register either a 2FA credential (if discoverable credentials are available), or a discoverable credential with UV.

For tap-and-go, Akshay wouldn't be setting rk=preferred because that's an rk=required case.

-- 
GitHub Notification of comment by agl
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1463#issuecomment-672290290 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 11 August 2020 21:32:12 UTC