Re: [webauthn] Support `discoverableCredential` field in the API. (#1565)

> It's my sense that adding this would make things more - not less - complicated. We should close this on that basis.

Could you explain this perspective?

From my perspective:
- Fairly few sites have deployed anything with discoverable credentials.
- Browsers are working from the living spec (i.e. it doesn't seem that the finalization of level 3 needs to be a barrier to browser implementation).

If all browser support this by the time that more sites start implementing this in earnest, tutorials and libraries can refer exclusively to discoverable credentials in prose and in code. "Resident key" would be a footnote that most site authors wouldn't have to worry about.

To me, that sounds a lot simpler than permanently leaving a level of indirection between the the same thing in prose and code.

-- 
GitHub Notification of comment by lgarron
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1565#issuecomment-777029198 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 10 February 2021 20:55:01 UTC