Re: [webauthn] Can we document protections (if any) around userHandle (with user-verification)? (#2266)

For clarity, @timcappalli saying "passkey" means "when the key is a resident/discoverable key". If the key is non-resident/non-discoverable, then no user-handle is provided during assertion. 

-- 
GitHub Notification of comment by Firstyear
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2266#issuecomment-2676483160 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Sunday, 23 February 2025 01:07:10 UTC