Re: [webauthn] Add new isPasskeyPlatformAuthenticatorAvailable() method (#1901)

> > `isPlatformBackupEligibleAuthenticatorAvailable()` would be more precise.
> 
> @ndpar that is not what the method is conveying. This PR contains a definition of passkeys, aliased to the existing definition of a discoverable credential.

ndpar is correct though - despite what the standards authors may desire, there are at least 4 different definitions of what a passkey is in use by vendors.

* Any possible webauthn credentials (cite https://freeipa.readthedocs.io/en/latest/designs/passkeys.html )
* A synchronised/roaming credentials (cite https://support.okta.com/help/s/article/Passkey-Management?language=en_US )
* A credential that has BE/BS=true - I can't find an obvious cite for this, android could fall into this category though in a way.
* And the passkeys are resident keys as I'm sure you're aware of.

As a result, I think it's not correct for us to use an ambiguous and murky marketing term in a specification. 

-- 
GitHub Notification of comment by Firstyear
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/1901#issuecomment-1583625312 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Friday, 9 June 2023 00:00:58 UTC