[webauthn] callerOrigin isn't actually the origin of the caller; it's the origin of the callee

bzbarsky has just created a new issue for 
https://github.com/w3c/webauthn:

== callerOrigin isn't actually the origin of the caller; it's the 
origin of the callee ==
callerOrigin in 
https://w3c.github.io/webauthn/#dom-webauthentication-makecredential 
step 3 is defined as the "current settings origin".  That means it's 
the origin of the callee function, which may or may not match the 
origin of the caller.  And either one of those two might or might not 
match the origin of the WebAuthentication object itself, of course.

At the very least, this should be named more clearly.

Please view or discuss this issue at 
https://github.com/w3c/webauthn/issues/271 using your GitHub account

Received on Friday, 4 November 2016 20:30:22 UTC