Re: [webauthn] Support `discoverableCredential` field in the API. (#1565)

WRT to efforts to ease adoption, please see issue #1637 where we are proposing an overall approach we feel will do so.  We do not feel that discrete security keys will have meaningful uptake in the broad consumer space regardless of how available and low cost they are.  User verifying platform authenticators are emerging and the RP best practices and webauthn API changes outlined in issue #1637 will, we think/hope, ease adoption and migration of users from username+password to WebAuthn/FIDO.

wrt terminology and nuances thereof, please see https://github.com/w3c/webauthn/issues/1648#issuecomment-879442441 and follow-on comments. 
BTW, "[resident credentials](https://www.w3.org/TR/webauthn/#resident-credential)" is a clearly deprecated term and I've been pleased of late that many/most folks are using "[discoverable credentials](https://www.w3.org/TR/webauthn/#discoverable-credential)" instead.  If not for API backwards compatibility issues (sigh), we would have eradicated the former term from the spec.


-- 
GitHub Notification of comment by equalsJeffH
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1565#issuecomment-879915213 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 14 July 2021 13:56:57 UTC