- From: Adam Langley via GitHub <sysbot+gh@w3.org>
- Date: Wed, 22 Mar 2023 19:37:00 +0000
- To: public-webauthn@w3.org
agl has just merged agl's pull request 1836 for https://github.com/w3c/webauthn: == Only expose the UV PRF == Authenticators may have different PRFs for the UV and non-UV case. Thus setting uv=preferred during an assertion is fraught: it doesn't fully specify which PRF to use. However, while implementing this, I ended up feeling that the prohibition on using uv=preferred was too strong. Sites may reasonably want to use uv=preferred and to take advantage of available PRF results. If the evaluation points are global then this isn't so silly as to justify a prohibition, I suspect. Fixes #1851. <!-- This comment and the below content is programmatically generated. You may add a comma-separated list of anchors you'd like a direct link to below (e.g. #idl-serializers, #idl-sequence): Don't remove this comment or modify anything below this line. If you don't want a preview generated for this pull request, just replace the whole of this comment's content by "no preview" and remove what's below. --> *** <a href="https://pr-preview.s3.amazonaws.com/w3c/webauthn/pull/1836.html" title="Last updated on Mar 16, 2023, 4:44 PM UTC (6478874)">Preview</a> | <a href="https://pr-preview.s3.amazonaws.com/w3c/webauthn/1836/33e7507...6478874.html" title="Last updated on Mar 16, 2023, 4:44 PM UTC (6478874)">Diff</a> See https://github.com/w3c/webauthn/pull/1836 -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Wednesday, 22 March 2023 19:37:02 UTC