Re: [webauthn] continuous assertion (#1785)

Note that on some native platforms this kind of continuous assertion  in a webauthn-compatible format is possible.   Apple AppAttest is basically Webauthn without user presence bit set. https://developer.apple.com/documentation/devicecheck/validating_apps_that_connect_to_your_server

Having contious assertions available in Service Workers would be a neat way of implementing Proof of Possession.

Whether that has to go through the existing web credentials API is a good question but in my eyes it's a good fit.

-- 
GitHub Notification of comment by arianvp
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1785#issuecomment-1269635159 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Thursday, 6 October 2022 09:05:06 UTC