Web Authentication `hints` parameter

[agl]

Request for Mozilla Position on an Emerging Web Specification

• Specification title: Web Authentication. (But just the new hints parameter.)
• Specification or proposal URL (if available): https://w3c.github.io/webauthn/#enum-hints
• Explainer URL (if available):
• Proposal author(s) (@-mention GitHub accounts): The WebAuthn WG
• Caniuse.com URL (optional):
• Bugzilla URL (optional):
• Mozillians who can provide input (optional): Daniel Veditz
• WebKit standards-position:

Other information

[dveditz]

Does this essentially deprecate authenticatorAttachment? I assume this was added, rather than add "hybrid" to authenticatorAttachment, because in some cases you don't otherwise want to supply the optional authenticatorSelectionCriteria. But no, authenticatorAttachment is still needed as part of the returned PublicKeyCredential object.

The strings are nice: "client-device" and "security-key" are easier to explain than "platform" and "cross-platform". An explicit "hybrid" rather than using "cross-platform" to mean two different things is especially nice.

Thoughts, @jschanck ?