Re: [webauthn] document and mitigate fingerprinting and disclosure risk of capabilities and extensions (#2320)

> We can do deeper analysis than just that it's a risk and that someone could maybe mitigate it.

@npdoty do you know anyone who can help with this analysis and proposed text?

-- 
GitHub Notification of comment by timcappalli
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2320#issuecomment-3462095084 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 29 October 2025 15:05:26 UTC