Re: [webauthn] adds Related Origin Requests (#2040)

> Therefore, it is hoped that from the "PublicKeyCredentialCreationOptions" before creating credentials at registration, it can be defined whether origin verification is required. If it is not required, the browser should be informed that any domain can pass the verification.

No domain is required to populate that file. The existing RP ID validation rules still apply and, if satisfied, no .well-known request will be made.

-- 
GitHub Notification of comment by agl
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/2040#issuecomment-2307285372 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Friday, 23 August 2024 15:08:31 UTC