Re: [webauthn] Could not use Webauthn `PublicKeyCredential.create` when the RP ID is a Host string(ip). (#1358)

> on 2020-02-19 call:
> 
>     * @akshay says he might be supportive of trying "ip address" out behind a flag, but doesnt think useful for users, so would not do it
> 
>     * we decided that we are going to close this issue, the spec is already nominally clear that ip addresses are not permitted in RP IDs
> 
>     * @jcjones volunteers to write WPTs to test out this restriction.

Very irritating decision, of course it would useful. For example, I am building an CMS/admin panel webapp that I will use to manage multiple websites. As the sole user the webapp, there is no reason for me to buy a domain, and I would rather not advertise its existence by giving it a name.

I don't see why people and organizations wouldn't want to use webauthn to protect their private assets.

-- 
GitHub Notification of comment by jbhanks
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1358#issuecomment-1711232804 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Friday, 8 September 2023 07:50:03 UTC