- From: Kote Isaev via GitHub <sysbot+gh@w3.org>
- Date: Sat, 19 Nov 2022 14:09:16 +0000
- To: public-webauthn@w3.org
> I would rather the browser providing all of the user interface for the login flow, that way every single website doesn't have to reinvent the wheel and users get much more consistency. Something like the webcam permissions popups. The browser would show "This website wants you to login! Login / Ignore" and users would click through that. When the user doesn't have a passkey for the site, the UI could say register instead of Login. There could be a browser UI indicator that you are logged in and a way to logout or request deletion of your account. I understand your point, but let me remind few points why websites would prefer style-able HTML over something fully controllable by browser: 1) Today all auth UI shown by browser looks so "unfinished" and "unbranded", that between using something like Basic auth over https, or even certificate based auth with certificate from auth card, and something with styled HTML UI with username and password boxes, sites automatically pick the later in favor of UI branding consistency. 2) there is no a clear way to logout from such authentications with browser UI, e. g. Basic auth over https. 3) Each website have own understanding of various aspects. One site have separated username and email, other websites use email as username, third use email OR username (you can type both). One website offer remember username only (remember me), others offer to remember user sign in for a while (keep me signed in), others do not show these checkboxes and assume users want be signed in for a while by default. Site authors want anything within website look within same style, as other UI. This is one of corner stones of success of Stripe Elements which are literally provide a way to visually "embed" sensitive data inputs into website with proper styling, while still the CC numbers and such not exposed to website JavaScript or not sent in plain text to website backend. -- GitHub Notification of comment by koteisaev Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1255#issuecomment-1320893603 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Saturday, 19 November 2022 14:09:18 UTC