- From: Rolf Lindemann via GitHub <sysbot+gh@w3.org>
- Date: Wed, 14 Feb 2024 10:46:18 +0000
- To: public-webauthn@w3.org
rlin1 has just created a new issue for https://github.com/w3c/webauthn: == Reflect caching of user gestures in WebAuthn assertion == ## Proposed Change Some pluggable passkey providers, do not request a fresh user gesture for each call to getAssertion. This is a deviation from the traditional behavior and might surprise relying parties that are using WebAuthn today with the respective default passkey providers. We propose the following: a) an ability for the RP to tell the passkey provider that caching of the user gesture is allowed (up to a defined time, the maximum user verification caching time maxUVC) b) an ability for the authenticator to reflect the caching of the user gesture in the assertion. See PR #2021 Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2023 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Wednesday, 14 February 2024 10:46:20 UTC