Re: [webauthn] Allow conditional mediation flow without username or password field, I.E. from button press (#2084)

Apologies for the delay here. I missed the first comment somehow, and have been busy this last week.

I just read through the proposal. Yes, immediate mediation would be a huge win for our use-case. Assuming that the relaxation of privacy features are acceptable, I think this would be a great addition that would seriously drive passkey adoption, not just for our unique use-case.

In my opinion as a Security Engineer, the proposed mitigations should be plenty to make fingerprinting with webauthn infeasible, so this seems like a perfect compromise.

-- 
GitHub Notification of comment by rsheasby
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2084#issuecomment-2935753845 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 3 June 2025 14:55:32 UTC