Re: [webauthn] Add a way to use webauthn without Javascript (#1255)

> > Although the percent of all browser clients blocking javascript is relevant, another question would be what percent of high computer literacy web users (eg, programmers, sysadmins, etc) block javascript? It's probably pretty high.
> 
> I would guess that the percentage of users who block javascript would be significantly higher if essential web technologies weren't so dependent on javascript nowadays. So I consider using the rarity of users disabling javascript as justification to not make the feature work without javascript to be a bit disingenuous.

++.

Related, when we encounter JavaScript running on a login page at $dayjob for internally developed apps, we file a security related issue. We require the business owner to accept the risk.

I don't think a typical web user understands the risk, so they should not be required to accept it.

-- 
GitHub Notification of comment by noloader
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1255#issuecomment-2611077417 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Thursday, 23 January 2025 21:43:04 UTC