Re: [webauthn] devciePubKey extension MUST be supported if passkey is supported (#1691)

> that now there is an avenue to phish users when originally the spec made WebAuthn-based authentication phishing resistant.

@MasterKale please explain how multi-device WebAuthn credentials now allow a user to be phished. These are dangerous statements to casually make without an explanation.

-- 
GitHub Notification of comment by timcappalli
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1691#issuecomment-1020131476 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 24 January 2022 14:01:59 UTC