- From: Mitar via GitHub <noreply@w3.org>
- Date: Wed, 09 Jul 2025 20:37:04 +0000
- To: public-webauthn@w3.org
> App can always send all the known credentialID in excludeList and credential will not be overwritten. How can `excludeCredentials` work with residential/discoverable keys and without username? The whole idea is that without username, I do not know in advance which keys the user has, so I cannot use `excludeCredentials`. If I do `get` and user aborts, then I might prompt the user to register a key, but if they make a mistake and do register a key, it will override any existing key. -- GitHub Notification of comment by mitar Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1568#issuecomment-3053934645 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Wednesday, 9 July 2025 20:37:05 UTC