W3C home > Mailing lists > Public > public-webauthn@w3.org > January 2020

Re: [webauthn] Conflict between WebAuthn and CTAP2 handling of userVerification mapping (#1306)

From: John Bradley via GitHub <sysbot+gh@w3.org>
Date: Thu, 23 Jan 2020 00:09:55 +0000
To: public-webauthn@w3.org
Message-ID: <issue_comment.created-577445878-1579738193-sysbot+gh@w3.org>
The CTAP 2.1 spec allows non resident credentials to be created without UV. 
Resident/Discoverable credentials still require UV if a UV/clientPin verification method is provisioned.

This avoids the requirement for the U2F workaround. 

-- 
GitHub Notification of comment by ve7jtb
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1306#issuecomment-577445878 using your GitHub account
Received on Thursday, 23 January 2020 00:09:56 UTC

This archive was generated by hypermail 2.4.0 : Thursday, 24 March 2022 20:38:37 UTC