3 ms·
> After the PublicKeyCredential has been obtained, it is sent to the server for validation. The WebAuthn specification describes a 19-point procedure to validat
by hamandcheese 7y ago
> After the PublicKeyCredential has been obtained, it is sent to the server for validation. The WebAuthn specification describes a 19-point procedure to validate the registration data
19 points?! I haven’t dug too deep into the details, but so far everything I’ve seen re: implementing WebAuthn seems so... over complicated? Compared to implementing, say, TOTP based 2FA, which is very straightforward.
- tialaramex 7y agoComplicated certainly. But over-complicated would imply that there's a significantly simpler way to do it. The nice thing about software is that it can be copied, so the complicated part only needs to be done once by somebody suitably skilled in the art.