Re: [webauthn] Deprecate AuthenticatorAttachment in favor of PublicKeyCredentialHints. (#2053)

> IMO number 2 could just as easily put `"hybrid"` before `"security-key"` as the RP desires - nothing about hints forces any of them into buckets, that should be an opinion established by RP's (or library maintainers.)

Ah, so it seems to be the case that `"hybrid"` is not contradictory to `"security-key"` _nor_ more/less specific. This seems to imply there are 8 partitions then:

1. `[]`
2. `["security-key"]`
3. `["client-device"]`
4. `["hybrid"]`
5. `["security-key", "hybrid"]`
6. `["hybrid", "security-key"]`
7. `["client-device", "hybrid"]`
8. `["hybrid", "client-device"]`

which in turn means that if the spec intends to map `hints` to `authenticatorAttachment` as it presently seems to, then there are five other values that need to get mapped (again ignoring my claim that `["hybrid"]` seems to be better mapped to nothing than `"cross-platform"`.

-- 
GitHub Notification of comment by zacknewman
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2053#issuecomment-2067399238 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Friday, 19 April 2024 23:45:54 UTC