Re: [webauthn] Can we document protections (if any) around userHandle (with user-verification)? (#2266)

>  thought that any time I was invoking auth that opened the modals was user-verification, and that the non-user-verification auth would basically be "silent",

No, that is [User Presence (UP)](https://www.w3.org/TR/webauthn-3/#test-of-user-presence). WebAuthn not does not allow silent authentication ceremonies. 

User Verification is a biometric, device PIN, or other interactive authorization gesture.

-- 
GitHub Notification of comment by timcappalli
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2266#issuecomment-2676964788 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Sunday, 23 February 2025 16:10:42 UTC