[Webkit-unassigned] [Bug 182893] [WebAuthN] Consider requiring user gestures for this API

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=182893

Yuriy Ackermann (FIDO Alliance) <ackermann.yuriy at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ackermann.yuriy at gmail.com

--- Comment #2 from Yuriy Ackermann (FIDO Alliance) <ackermann.yuriy at gmail.com> ---
Authenticators must do TUP/UV before every operation. The only check you must do is when attestation returned and its set DIRECT, then you must obtain consent from the user to return it to the server.

Biometrics authenticators block fingerprint after 5 tries per security requirements

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180830/9537ed65/attachment.html>