Understanding WebAuthn credential protection policy
Source: News.Ycombinator
Published:
<p>When creating a WebAuthn credential, you can specify whether it should be discoverable using the residentKey option.</p> <p>However, the relying party cannot control when or how the credential can be discovered. You may want it to become discoverable only after user verification and hide the acco