Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Poor documentation of how authnr aspects (platform, UV, RK) interact #1231

Closed
emlun opened this issue Jun 4, 2019 · 1 comment · Fixed by #1270
Closed

Poor documentation of how authnr aspects (platform, UV, RK) interact #1231

emlun opened this issue Jun 4, 2019 · 1 comment · Fixed by #1270
Assignees
@emlun
Labels
stat:pr-open type:editorial
Milestone
L2-WD-02

Comments

@emlun
Copy link
Member

emlun commented Jun 4, 2019

An RP implementer remarks:

And some extra things that would be nice:
[...]

  • An explainer on how the different physical access concepts interact: user presence vs. user verification vs. platform authentication vs. prevent silent access. This is a little confusing.
@bdewater
Copy link

Related to this issue: guidance on a passwordless login experience. Common advice seems to be to set requireResidentKey: true but the taxonomy table indicates that for first-factor authenticator, either single or multi-factor, client-side storage is just as acceptable.

@jcjones jcjones mentioned this issue Jun 12, 2019
Closed
@nadalin nadalin added this to the L2-WD-02 milestone Jun 19, 2019
@emlun emlun mentioned this issue Aug 7, 2019
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@emlun emlun

Labels
stat:pr-open type:editorial
Projects
None yet
Milestone
L2-WD-02
Development

Successfully merging a pull request may close this issue.

Improve authenticator taxonomy section w3c/webauthn
3 participants
@bdewater @emlun @nadalin