Re: [webauthn] How to know if a user has already registered a device? (#1749)

I agree with @dagnelies here. 
Almost all docs/guides/tutorials/articles include a register and login button, which makes no sense. This "bad example" will be copied pasted in new apps using webauthn. 

Moreover, when proceeding with a login (get) without prior registration the user is prompted into a nonsense UI on windows, and a really horrible "no passkeys for <domain>" on android.

IMHO, this should have been a single function to create a proof/signature of the device, without any registration/login difference. 

Current implementation will reduce or at least slowdown adoption. 

I understand that this was developed by very smart people, but definitely not someone with UX in mind.

-- 
GitHub Notification of comment by andreujuanc
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1749#issuecomment-1699094777 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 30 August 2023 12:40:19 UTC