Re: [webauthn] [Editorial] platform authenticator relationship to WebAuthn Client and Client Device (#2164)

No, I argue this is in fact always true, but that the _client device_ can also act as a [roaming authenticator](https://w3c.github.io/webauthn/#roaming-authenticators) in some contexts. Whether a given authenticator is a _platform authenticator_ or a _roaming authenticator_ is decided by the client executing a WebAuthn ceremony, not by intrinsic properties of the authenticator itself. An Android phone "is" a platform authenticator when executing WebAuthn in a browser running on the phone, but "is" a roaming authenticator when acting as a Bluetooth authenticator with a client running on a laptop.

If those are unhelpful definitions, then we would instead need to replace the definitions with new ones.

-- 
GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2164#issuecomment-2385620776 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 1 October 2024 12:15:49 UTC