- From: Tim Cappalli via GitHub <sysbot+gh@w3.org>
- Date: Sun, 24 Mar 2024 21:50:48 +0000
- To: public-webauthn@w3.org
This implementation is correct. All WebAuthn credentials are scoped to a web origin. The Web Authentication specification only defines a Web Platform API. Native apps use OS-level abstractions of WebAuthn, defined by each app platform (e.g. OS). Those app platforms also handle mapping app identifies to web origins, typically using a well-known URL type construct. How WebAuthn clients and authenticators display app-platform specific metadata (such as an app name or publisher) are out of scope for the Web Authentication specification. -- GitHub Notification of comment by timcappalli Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2048#issuecomment-2016956695 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Sunday, 24 March 2024 21:50:48 UTC