Re: [webauthn] adds Related Origin Requests (#2040)

> Would the bitwarden extension be able to use a passkey, bound to "vault.andersaberg.com", if there is a "vault.andersaberg.com/.well-known/webauthn"-file proclaiming "bitwarden.com", or a browser extension ID to be an associated domain? I'm guessing _yes_, if the extension has host permission on that domain (vault.andersaberg.com)?


@abergs (and @nsatragno) can the extension dynamically change its identifier (locally) after install based on the vault configuration? (https://lists.w3.org/Archives/Public/public-webauthn/2023Dec/0078.html)

-- 
GitHub Notification of comment by timcappalli
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/2040#issuecomment-2083533647 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 29 April 2024 19:47:02 UTC