Re: [webauthn] Readd the PRF extension. (#1732)

IMO we shouldn't include random extensions like this to the standard. Currently between the 5 models of test authenticator I have from various vendors, no webauthn extension is supported by them.

I think these extensions should be left to specific device manufacturers to define and publish, so that at the least, RP's know *which* manufacturers might support them, rather than misleading that "every" webauthn device "might" support this. 

Alternately, there should be a declaration of which vendor's devices support that extension so that it can be tested and checked by RP's when they go to implement the standard. 

-- 
GitHub Notification of comment by Firstyear
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/1732#issuecomment-1130749618 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 18 May 2022 23:41:59 UTC