Re: [webauthn] Cross origin authentication without iframes (#1667)

SSH forces all RPID to begin with ssh:  you can override the default with -O application=ssh:foo.

I think the same pattern can work for SPC.   As pointed out the name appears in credential management.  
It is probably a good thing to differentiate between authentication credentials and other types like payments.  

We might want to choose something other than spc: such as payment:  to make it clearer to users.

On the other hand, we only have one browser exposing credential management currently.   

It might be possible to have the credential management UI expand spc: to something more obvious like "Card Payment"

-- 
GitHub Notification of comment by ve7jtb
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1667#issuecomment-970348797 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 16 November 2021 14:51:16 UTC