Re: [webauthn] Conditional creation incompatible with `uvInitialized` semantics in Chapter 7? (#2295)

Well Safari + Passwords app on my iPhone 15 Pro Max running iOS 18.5 does not error when I require user verification with conditional mediation; instead the app incorrectly creates the credential despite not enforcing user verification causing the ceremony to fail on the server side (which correctly enforces the UV bit).

I suppose this is a bug in Safari/Passwords though which wouldn't be the first. I know Safari and Passwords incorrectly creates a credential using ES256 even if ES256 is not one of the accepted algorithms despite the spec mandating that an error be reported if none of the `COSEAlgorithmIdentifier`s are supported.

-- 
GitHub Notification of comment by zacknewman
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2295#issuecomment-3059473472 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Thursday, 10 July 2025 23:14:14 UTC