Re: [webauthn] residentKey: "preferred-if-unlimited"? (#1822)

My recollection on why we closed this goes back to these comments from @ve7jtb and myself:

https://github.com/w3c/webauthn/issues/1822#issuecomment-1310226160
https://github.com/w3c/webauthn/issues/1822#issuecomment-1317639477

Basically translated - all RPs would have to behave the same way (use the same options) for there to be consistent UX, and we believed the browser is better positioned to prompt the user to help them decide whether to use an RK slot on HSKs. I'm not arguing for or against here - just replaying the challenges associated with introducing another option and what a possible alternative is.

-- 
GitHub Notification of comment by sbweeden
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1822#issuecomment-1370378284 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 4 January 2023 01:03:51 UTC