Re: [webauthn] Add `challengeUrl` (#2152)

@kenrb, is there a reason HTTP POST is not used? Perhaps there is something I misunderstand in the security section, but I don't see how any of the constraints preclude the more appropriate method since [as stated](https://github.com/w3c/webauthn/issues/2152#issuecomment-2400889985), the operation is not idempotent. [You said](https://github.com/w3c/webauthn/issues/2152#issuecomment-2403373715) you would update the explainer, so I'm unsure if this is an oversight or a change in stance.

-- 
GitHub Notification of comment by zacknewman
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2152#issuecomment-2460640574 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 6 November 2024 19:48:40 UTC