WillSmartYubico
commented
1 year ago @elukewalker - went back and forth a number of times for the wording in fa6ca88
It may not be obvious to developers that even if they specify UV=required, that a credential may get created (and used) without UV. I wasn't able to locate anywhere in the rest of the WebAuthn docs that discussed how to check that a registration or authentication actually used UV.
I didn't feel this doc was the right place to talk about that.
This update reflects the latest browser support report tests as well as includes wording that describes the browsers and platforms that can be used to interact with passkeys that are stored on the YubiKey.