-
Notifications
You must be signed in to change notification settings - Fork 47
Description
When we create a new payment credential using your roaming credential, it's implied that the browser stores the credential displayName
and icon
so that when it's presented as an authentication option in the future, the browser can provide the user that useful bit of context that "this will use your Blue Authenticator to approve putting this purchase on your Yellow Card ending in 9999."
Moving the Blue Authenticator to another computer though and doing the same operation with the same account will prvoide a compatible credentialId
that the browser can then use to approve this new purchase ... but there's no knowledge of what that credentialId
would be approving for. E.g., the context would be, "This will use your Blue Authenticator to approve for an unknown payment type."
Browsers could sync that data around, but many people have many reasons to not sync, so this is a "normal" edge case. What should happen when a browser can't display useful context? Ignore that credential ID?