Re: [webauthn] Which "pubKeyCredParams" to use? (#1757)

@emlun Agreed. We are makers of such a back-end system for banks, considering adding WebAuthn support and seeing close to zero benefits in implementing RS256 and Ed25519 because these will be rarely used. Plus, we have an idea on how to build WebAuthn back-end in a more creative way to simplify enrollment to service providers, and we are reluctant to support RS256 there because of the "old Windows problem."

Still need more sleep actually to make any move there. Maybe we are too "pragmatic" and I sure understand the "broader industry view" to formally support more algorithms despite not being really used.

-- 
GitHub Notification of comment by petrdvorak
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1757#issuecomment-1532975841 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 3 May 2023 12:50:55 UTC