Skip to content

Commit

Permalink
PR #763 untangled: Add consideration of browser permissions framework…
Browse files Browse the repository at this point in the history
… for extension processing (#771)

PR #763 untangled: Add consideration of browser permissions framework for extension processing
  • Loading branch information
emlun authored and selfissued committed Feb 6, 2018
1 parent 4115aef commit 99766e0
Showing 1 changed file with 8 additions and 0 deletions.
8 changes: 8 additions & 0 deletions index.bs
Expand Up @@ -4551,6 +4551,14 @@ the wrong [=credential ID=], or if an attacker intercepts and manipulates the [=
[=credential public key=] with which to verify the returned signed [=authenticator data=]
(a.k.a., [=assertion=]), and thus the interaction would end in an error.


## Browser Permissions Framework and Extensions ## {#browser-permissions-framework-extensions}

Web Authentication API implementations should leverage the browser permissions framework as much as possible when obtaining user
permissions for certain extensions. An example is the location extension (see [[#sctn-location-extension]]), implementations of
which should make use of the existing browser permissions framework for the Geolocation API.


# Privacy Considerations # {#sctn-privacy-considerations}

The privacy principles in [[!FIDO-Privacy-Principles]] also apply to this specification.
Expand Down

0 comments on commit 99766e0

Please sign in to comment.