Re: [webauthn] Improve guidance around using UV (#1774)

I've removed the instruction to "promote" UV preferred to required, and also reworked the `uvInitialized` state. The caveat on first-time UV is moved to the `uvInitialized` definition instead of the RP assertion steps, and now refers to a "trust relationship" instead of implying a "guarantee that the same user is operating the authenticator" (which is not what UV is). The update to `uvInitialized` is now also more defensive as a result.

-- 
GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/1774#issuecomment-1479565774 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 22 March 2023 13:26:22 UTC