Re: [webauthn] Cross origin authentication without iframes (#1667)

@akshayku The process is proximately like this:
- The *User* in some unspecified way provides a payment instrument (card number)
- The *Merchant* uses that to lookup *Issuer* and its FIDO server
- Using the card number the *Merchant* invokes the FIDO server
- If there is an authenticator associated with the card number SPC can be invoked, otherwise it the *Merchant* code must do something else

The "black box" concept used by Apple Pay et al, would if applied to FIDO not require a single change in the WebAuthn accessmodel.


-- 
GitHub Notification of comment by cyberphone
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1667#issuecomment-906088983 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Thursday, 26 August 2021 04:39:21 UTC