When to do WebAuthn offline refill

[nilsbehlen]

Trying it every time after using the token offline is very annoying because, depending on the network setup, it is required to wait for some timeout. This is also not really affected by the possibilities given with WinHttpSetTimeouts, or the stages are stacked or something - it is longer than configured... For HOTP there is the refill threshold. For WebAuthn the options are either:

• Time based
• Auth counter based (as returned from the authenticator)