Re: [webauthn] devciePubKey extension MUST be supported if passkey is supported (#1691)

Thanks for all the comments.

I not know the best way to define the requirement in the spec. But RP requirement is how to avoid the following situation.

> There are many RPs who cannot accept passkeys without devicePubKey due to security and/or legal reasons. 
> If there is a device that supports passkeys but not devicePubKey, such RPs cannot deploy WebAuthN or FIDO at all.

How will this be avoided? How can the WebAuthN spec help solve?

GitHub Notification of comment by maxhata
Please view or discuss this issue at using your GitHub account

Sent via github-notify-ml as configured in

Received on Friday, 21 January 2022 02:31:24 UTC