- From: Manish Khedawat via GitHub <sysbot+gh@w3.org>
- Date: Mon, 05 Jul 2021 16:57:44 +0000
- To: public-webauthn@w3.org
mkkhedawat has just created a new issue for https://github.com/w3c/webauthn:
== webauthn - API need to know the registration status of an platform authenticator ==
**Facts**
- Multiple devices require multiple registrations
- Workaround ways to know if a user is registered for RP on the current device
- Persistent cookie
- User Agent manipulation
- When you call a support center, the first solution anybody provides is clear cookies 🥇
- UX via User-Agent is strongly discouraged
- Resident credentials have a lot of zombies
**Problems**
- Clearing cookies is common enough, results in frequent registrations
- If one uses User-Agent
- ends up limiting one type of device per user, Two windows devices will fail.
> Will it make sense if we had an API that doesn't require user intervention and can tell us if credential X is available to provide assertion on current(or given) RP?
That way we can prompt for assertion only if credentials available on the server are accepted on the current device otherwise follow the registration process.
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1639 using your GitHub account
--
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Monday, 5 July 2021 16:57:46 UTC