Re: [webauthn] Clarify how a user can authenticate from multiple devices (#151)

> If IDs come back, it'd be nice to trigger webauthn automatically and get back a failure saying "none of these IDs are here" which also doesn't trigger any native browser UI

The desire is quite understandable but we can't allow websites to silently probe the browser for the user's identity for the obvious reasons.

> and a button was added for the user to trigger webauthn if they feel like it.

For 1st-factor WebAuthn, that's correct. The answer in the future will be that browsers will support WebAuthn via autofill (#1637) so that the browser can present the user a list of applicable credentials when focusing the username field.

-- 
GitHub Notification of comment by agl
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/151#issuecomment-902142401 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Thursday, 19 August 2021 18:26:17 UTC