- From: Adam Langley via GitHub <sysbot+gh@w3.org>
- Date: Wed, 04 Jan 2023 22:14:01 +0000
- To: public-webauthn@w3.org
The following commits were just pushed by agl to https://github.com/w3c/webauthn: * Don't be so strict about uv with the PRF extension. Authenticators may have different PRFs for the UV and non-UV case. Thus setting uv=preferred during an assertion is fraught: it doesn't fully specify which PRF to use. However, while implementing this, I ended up feeling that the prohibition on using uv=preferred was too strong. Sites may reasonably want to use uv=preferred and to take advantage of available PRF results. If the evaluation points are global then this isn't so silly as to justify a prohibition, I suspect. by Adam Langley https://github.com/w3c/webauthn/commit/24359a14f2098d260f7b8529d38fe6346fed2326 -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Wednesday, 4 January 2023 22:14:03 UTC