Re: [webauthn] Clarify the need for truly randomly generated challenges (#1856)

> While the implementation challenge is non-trivial for the browser, a `challengeCallback` of type `() -> Promise<BufferSource>` as an alternative to `challenge` is interesting.

I would support this addition to the API.

-- 
GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1856#issuecomment-1443956245 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Friday, 24 February 2023 16:26:50 UTC