Re: [webauthn] Clarify the need for truly randomly generated challenges (aka challenge callback issue) (#1856)

>What was in doubt was whether or not this would work in Safari without a user gesture. It does work.

For what it's worth, it was mentioned explicitly in [the Apple video](https://developer.apple.com/videos/play/wwdc2022/10092/) that I referenced [previously](https://github.com/w3c/webauthn/issues/1856#issuecomment-1437753337), so it wasn't in doubt for me, at least. :)

It is in fact part of what I already quoted in that post, namely the "so they don't require a user gesture" part.

-- 
GitHub Notification of comment by dolda2000
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1856#issuecomment-1620011614 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 4 July 2023 10:46:11 UTC