Re: [webauthn] Proposal/discussion: non-extractable CryptoKey output from the prf extension (#1895)

I left this [comment in #1945](https://github.com/w3c/webauthn/pull/1945#issuecomment-1715779428) but figured I'd repost here to better surface it for others following this issue:

> **WG meeting @ TPAC 9/12:** We've spent a lot of time trying to figure out what direction to go with this. However we've not yet identified sufficient interest in a discrete use case (e.g. provider-centric need for prf output) to say that this "swiss army knife" PR (vs the more limited https://github.com/w3c/webauthn/pull/1946 that got closed) should be pursued any further.
> 
> Leaving this open for now, but unless a specific use case for prf can be identified that cannot be served by this extension in its current form then we should probably close it at the next meeting.

-- 
GitHub Notification of comment by MasterKale
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1895#issuecomment-1715797923 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 12 September 2023 14:07:05 UTC