Nick Doty

Since this method isn't intended to invoke user permission or a detailed request to another resource (in fact, I believe we are specifically prohibiting that, because it's just supposed to...

Requesting multiple credentials in a single request seems confusing and complex (to both the site developer and the user) and hostile to the user. Making requests about a single credential...

Clearing communicating the purpose is easier and more specific when document requests are done separately. "How do you want to pay?" and "Can you show me your ID so I...

If it would be helpful, we could generate separate github issues for each of: * the placeholder headings in the editor's draft, * the [system design mitigations in credential-considerations](https://github.com/w3c/credential-considerations/blob/main/credentials-considerations.md#system-design-mitigations), and...

Yes, I think it's a lot of issues. I would be very surprised if a spec of this kind wasn't mostly text about the potential abuses and mitigations compared to...

Per 25 June call, I think we have many substantive issues on privacy considerations at this point, and substantial text (and a couple open PRs that we believe we can...

Is this the same as #222? Or I don't know if a request for multiple credentials is different than a request for multiple attributes that would require a presentation of...

`` is a reference to another WICG proposal, [PEPC (Page Embedded Permission Control)](https://github.com/WICG/PEPC/blob/main/explainer.md). Having the prompt button be browser-generated but embedded within the web content itself would make it possible...

I think dropping the privacy requirements just because they haven't been implemented isn't a good approach. Instead, we should add tests and address compliance by implementers. Yes, there are other...

The changes have been proposed to some browsers: https://issues.chromium.org/issues/41452280 https://bugzilla.mozilla.org/show_bug.cgi?id=401352 and proposed for testing: https://github.com/web-platform-tests/wpt/issues/42690 The reality is that some browsers implement this without any privacy protections _normatively recommended in...