3 ms·
What I don't get is why can't the browser just maintain a list of accounts that it knows work with the non-resident key? The username is not secret information
by cameldrv 3y ago
What I don't get is why can't the browser just maintain a list of accounts that it knows work with the non-resident key? The username is not secret information, so why does it need to be held in the key?
- drdaeman 3y agoBecause a key could be used with a brand new browser on an OS or machine that you've never used before. And the problem is that it's not usernames, they're IDs, not intended for humans, so manually typing those is not exactly a good idea.