A sensitive write refused until the user confirms with their passkey. The browser asks for one and retries the write once; the proof is kept by the server, never by the browser.
A sensitive write refused until the user confirms with their passkey. The browser asks for one and retries the write once; the proof is kept by the server, never by the browser.