Re: [webauthn] residentKey: "preferred-if-unlimited"? (#1822)

The issue with "username + FIDO2" is that you will run into UX issues. Basically all the reasons why conditional UI was introduced. Yes, you can find out if the user has a FIDO2 credential as soon as you have the username. But you don't know if it's available on the current device (or browser), so just prompting for it leads to suboptimal UX. You can try to work around that with cookies and local storage, but as we had to learn by building this more than once, this will never be a 100% solution.

-- 
GitHub Notification of comment by FlxMgdnz
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1822#issuecomment-1371143000 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 4 January 2023 16:24:28 UTC