webauthn
webauthn copied to clipboard
w3c
FIDO credential decommissioning
FIDO credential decommissioning (with 3 cases) is specified in clause 1.3.5. However no API is defined yet for that end. Would like to raise the issue and request discussions here. The specified three uses cases ought to covered, and accomodate both credential types (client-side and server-side).
We have discussed this several times now and have chosen not to proceed down this path.
on 9-Feb-2022 call: @agl notes that the "Report signaling" section of https://github.com/w3c/webauthn/wiki/Explainer:-broadening-the-user-base-of-WebAuthn#report-signaling speaks to the needs being expressed here (although presently there is no consensus regarding actually developing and incorporating such functionality in the spec).
on 23-Feb-2022 call: we are awaiting response from @jdenghifive.
on 9-Mar-2022 call:
Not having heard back from @jdenghifive, we've triaged this to the "futures" milestone for future consideration.
@agl noted that the "report signaling" section of the explainer (linked in the comment above) continues to be, in general, an interesting idea that the working group should consider when it has the cycles.
closing to consolidate discussions on this topic. please continue discussions here: https://github.com/w3c/webauthn/issues/1967
