4 ms·

Does anyone know why Webauth does not support a message associated with the authentication? Shouldn't the user be informed in a secure way what they are authent

by oezi 6y ago

Does anyone know why Webauth does not support a message associated with the authentication? Shouldn't the user be informed in a secure way what they are authenticating for? Currently only site and user name are supported to be shown to the user. For payments (PSD2 for instance) it is a requirement to also provide information about the transaction for instance.

EtienneK 6y ago
Last time I checked, WebAuthN does not support UAF transaction signing yet - only via extensions and thus we don't see it in the browser implementations. Hopefully it gets added to the spec in the future.