3 ms·
I think the point is it's up to the relying party to make the decision; so an uneven user experience is possible.
by NovemberWhiskey 5y ago
I think the point is it's up to the relying party to make the decision; so an uneven user experience is possible.
- zozbot234 5y agoIf an "insecure" authenticator reveals itself at enrollment, the only "unevenness" is that attempts to enroll it might fail, perhaps with a request to use a securely attested authenticator instead - you would never be locked out from any service after the fact. This is better than "cloning" a supposedly secure device and then failing a count check while trying to authenticate.
- NovemberWhiskey 5y agoYeah; being told "you can't use that here" for some sites is a pretty uneven user experience, wouldn't you say? Not sure why the scare quotes are necessary here.