Passkey origin check

REC-561. This page is not the portal — it is the harness that proves this origin can assert the passkey your iPhone already registered, which is the thing REC-557 is built on top of.

Origin

—

Relying party

—

Platform authenticator

checking…

Nothing is sent anywhere. The challenge is random and generated in this tab, so the signature proves nothing to a server — what it proves is that the browser accepts app-dev.reconcily.uk as a valid origin for relying party reconcily.uk, and that the credential registered on iOS is discoverable here. A server-verified assertion is REC-557's job.