Re: [webauthn] Dependence on Browser state for Primary Factor login (#1356)

> Couldn't a UI prompt to select a registered user for the current site require a user gesture?

I'm guessing that would not be a very effective mitigation because users could be social-engineered into providing a sufficient number of user gestures ("keep holding down the space bar to win!").


-- 
GitHub Notification of comment by kreichgauer
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1356#issuecomment-572782117 using your GitHub account

Received on Thursday, 9 January 2020 22:16:53 UTC