ASVS
ASVS copied to clipboard
WebAuthn / Web Authentication API
Hi, I searched the standard (V2 Authentication) for recommendation of using the Web Authentication API / WebAuthn but didn't find any information about it. Are there any recommendations regarding using it? Thanks,
The current 2.2.9 mandates MFA, 2.2.4 mandates a hardware based authenticator. Do you think that covers it?
well, I think 2.2.4 covers it. But, In my opinion WebAuthn is the future of web authentication with many advantages and great support. If it was up to me I would mention it, but anyway its included in 2.2.4
I am going to close this because I have a wider question on 2.2.4 in #1340 which I will incorporate this into.