diff --git a/index.bs b/index.bs index d6925e628..f66be4027 100644 --- a/index.bs +++ b/index.bs @@ -3121,6 +3121,9 @@ follows: |credential| from the [=credentials map=] or employ an [=authenticator=]-specific procedure to hide it from future [=authentication ceremonies=]. +1. Else, if |credential| has been hidden by an [=authenticator=]-specific + procecure, reverse the action so that |credential| is present in future + [=authentication ceremonies=].
@@ -3153,7 +3156,10 @@ e.g. on every sign in. Note: Credentials not present in {{AllAcceptedCredentialIdsOptions/allAcceptedCredentialIds}} will be removed or hidden, potentially irreversibly. [=Relying parties=] must exercise care that -valid credential IDs are never omitted from the list. +valid credential IDs are never omitted from the list. If a valid [=credential +ID=] were accidentally omitted, [=relying parties=] should immediately include +them in {{PublicKeyCredential/signalAllAcceptedCredentialIds(options)}} as soon +as possible to "unhide" them, if supported by the [=authenticator=]. #### {{PublicKeyCredential/signalCurrentUserDetails(options)}} #### {#sctn-signalCurrentUserDetails}