[webauthn] Breaking change in Chrome 95/W10 (#1677)

cyberphone has just created a new issue for https://github.com/w3c/webauthn:

== Breaking change in Chrome 95/W10 ==
To date it seems that RPs do not use the `transports` argument because at least Windows and Android clients work fine without it.  However, starting with Chrome 95 it this has changed because otherwise you get an extra authenticator dialog also for logins using Windows.

That `getTransports()` fails on Firefox is another indication that `transports` is currently not used.

Testing:
- go to https://webauthn.io/ 
- set Authenticator Type to "platform"
- register.  Then you get a new dialog, probably not related to Windows Hello
- login.  Now you get this dialog again.  It should not be there in a proper RP implementation

I think the change is fine, but the WebAuthn ecosystem is apparently unprepared for this update.

Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1677 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Sunday, 24 October 2021 05:11:09 UTC