Re: [webauthn] New Authenticator Extension: Time Since UV (#2034)

I think@jschanck proposal is better than noise+caps in both simplicity and useful resolution.

> There is an RP policy gap in this idea that I think could be addressed by having an extension which permits inputs and outputs. The use case is, "As an RP I'm ok with uv=preferred however only if its within the last xx period (eg an hour)".

As long as that xx period is compared to the resolution suggested by @jschanck I think we negated the privacy concern that was raised during the call and would result in better UX.

-- 
GitHub Notification of comment by abergs
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2034#issuecomment-1970813262 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Thursday, 29 February 2024 11:02:58 UTC