Re: [webauthn] Remove unimplemented extensions (#1386)

@emlun @arshadnoor Thanks for clarification. 

In my opinion the separation of the "passwordless authentication" into WebAuthn and CTAP2 managed by two organizations (W3C/FIDO) make it pretty hard to get the full picture of what is actually usable. 

Another level of confusion is the "level concept" of the WebAuthn standard. Typically if you use levels so level 2 includes or bases  on level 1, but as the removal of extensions shows this is not the case in WebAuthn. A third dimension of confusion is introduced by FIDO as there are the [Certified Authenticator Levels]( - again levels that have nothing to do with WebAuthn levels. 

Why not call it as it is a "version" so we have version 1.0 and an partially incompatible version 2.0. That would be in my opinion way more easy to understand. 

GitHub Notification of comment by jpstotz
Please view or discuss this issue at using your GitHub account

Sent via github-notify-ml as configured in

Received on Wednesday, 14 July 2021 13:34:27 UTC