Re: [webauthn] Which "pubKeyCredParams" to use? (#1757)

... I retroactively wonder what is the benefit of recommending multiple algorithms... More work, less compatibility, slower adoption... Can you see any hard benefits over just recommending: "Use ES256 at a minimum" (which is universally supported in all new systems)? Mixing RSA with EC in one codebase on a server just adds complexity, while almost nobody ends up using RSA these days so the complexity (as I see it) does not bring much value.

-- 
GitHub Notification of comment by petrdvorak
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1757#issuecomment-1528131069 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Friday, 28 April 2023 21:55:00 UTC