Re: [webauthn] Add a way to use webauthn without Javascript (#1255)

>prerendering old dynamic stuff, like challenge for registration forms.

You should never reuse a [`challenge`](, it should be uniquely generated for each registration/authentication ceremony. See [ยง13.4.1. Cryptographic Challenges
]( (and pardon me if I misinterpreted what you meant).

GitHub Notification of comment by emlun
Please view or discuss this issue at using your GitHub account

Received on Monday, 25 May 2020 09:57:33 UTC