Re: [webauthn] Privacy considerations for cross-origin usage (#2391)

> The user confusion there isn't that the calling origin is different from the RP ID from creation time, but that it might be different (and connecting activity or accounts between) the top-level document origin.

The top origin is always visible in the omnibox. 



-- 
GitHub Notification of comment by timcappalli
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/2391#issuecomment-4078100376 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 17 March 2026 21:26:40 UTC