Re: [webauthn] Authenticator flag to indicate internal knowledge of rk (discoverable credential creation). (#1761)

This change would be beneficial for a RP from the debugging / troubleshooting / auditing perspective. Sometimes the client (JS) portion of the RP code is tweaked by the customer, so the server side has wrong assumptions about the discoverability of the credentials. Knowing that the credential was created as discoverable, or not, would simplify troubleshooting in some cases, and potentially raise alerts on the server side if the behaviour is inconsistent with the server side code.

-- 
GitHub Notification of comment by ndpar
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1761#issuecomment-1175377664 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 5 July 2022 18:44:15 UTC