- From: Tim Cappalli via GitHub <sysbot+gh@w3.org>
- Date: Wed, 27 Mar 2024 15:58:04 +0000
- To: public-webauthn@w3.org
@rlin1 this is only used with UV=preferred.
Spec text (line 7622): [=registration extension|Registration=] and [=authentication extension|Authentication=] when {{AuthenticatorSelectionCriteria/userVerification}} is set to {{UserVerificationRequirement/preferred}}.
If an RP wants a fresh UV and will fail or otherwise step up, they should use UV=required.
> the RP could tell the passkey provider that fresh user verification is required
That is what UV=required does today.
--
GitHub Notification of comment by timcappalli
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/2052#issuecomment-2023130848 using your GitHub account
--
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Wednesday, 27 March 2024 15:58:05 UTC