dictionary OTPCredentialRequestOptions {
- sequence transport = [];
+ sequence transport = [];
};
: transport
- :: This OPTIONAL member contains a hint as to how the [=server=] might receive the OTP.
- The values SHOULD be members of {{OTPCredentialTransportType}} but [=client platforms=] MUST ignore unknown values.
+ :: This OPTIONAL member hints as to how the [=server=] might send
+ the OTP.
+ The sequence may contain any number [=transport values=] as hints. The
+ [=User Agent=] MUST ignore unknown or unsupported values.
- User Agents may implement various transport mechanisms to allow
- the retrieval of OTPs. This enumeration defines hints as to how
- user agents may communicate with the transport mechanisms.
-
- : sms
- :: Indicates that the OTP is expected to arrive via SMS.
-
# Transports # {#transports}
@@ -379,11 +363,21 @@ OTP.
We expect a variety of different transport mechanisms to enable OTPs
to be received, most notably via SMS, email and hardware devices.
-Each of these transport mechanisms will need their own conventions on
-how to provide OTPs to the browser.
+Each of these transport mechanisms is uniquely identified with a transport
+value and will need their own conventions on how to provide OTPs to the
+browser. In this draft, we only specify one such transport: [=sms=], and
+leave the API surface to be extensible to any number of transports.
+
+The following [=transport values=] are valid:
+
+ : sms
+ :: Indicates that the OTP is expected to arrive via SMS.
+ [[#transports-sms]] discusses conventions related to this transport.
+
+
-In this draft, we leave the API surface to be extensible to any number
-of transports.
+User Agents may implement any subset of transport mechanisms to allow the
+retrieval of OTPs.
## SMS ## {#transports-sms}
@@ -394,7 +388,8 @@ SMS messages, allowing developers to verify phone numbers. They
are typically sent embedded in an SMS message, which gets copied and
pasted by users.
-[[sms-one-time-codes]] defines [=origin-bound one-time code messages=], a format for sending OTPs over SMS and associating them with origins.
+[[sms-one-time-codes]] defines [=origin-bound one-time code messages=],
+a format for sending OTPs over SMS and associating them with origins.
# Security # {#security}
diff --git a/index.html b/index.html
index c26e9d6..7768aa5 100644
--- a/index.html
+++ b/index.html
@@ -1222,10 +1222,10 @@
}
-
+
-
+