passkey integration for weblets #19
Description
I'd like to make a weblet that's only available to me; and I'd like to take advantage of the deployment of biometric authentication, which seems to be done well: the biometric info doesn't leave the device; it's linked to a keypair where the private key doesn't leave the device.
(Here's hoping to find the trusted source where I learned that; by Ben Adida, IIRC.)
Hmm... if I want to share with somebody else, I guess I just use normal endo messaging to share a normal OCapN-ish URL with large random numbers in it... I'd want that to be revocable... I suppose I'd want a petname for "Joe's access to my-secret-thing-1". I suppose that should be a separate issue...