RE: Timeouts and WebauthN

Hi Jon,

> An extension of time means you do not lose any data.  Restarting the auth process may require that you re-enter your user name or authentication details again.

Except that in this case (WebauthN) you don’t have any details to input. You press the button, it hands off to your device, and if your device provides the authentication you’re in. If not, you start again by hitting the button.

There is no data to loose. (This is after it is setup, you would have more info if you are registering in the first place.)

How is that different from a key press to extend?

Cheers,

-Alastair