Discussion of the issue is available in Issue 23. To file comments on this proposal, please raise new issues for each discrete comment in GitHub.
Essential steps of an authentication process, which rely upon recalling or transcribing information, have one of the following:
- alternative essential steps, which do not rely upon recalling or transcribing information; or
an authentication-credentials reset process, which does not rely upon recalling or transcribing information
Except for when any of the following are true:
- Authentication process involves basic personal identifying information to which the user has access, such as name, address, email address and identification or social security number.
- This is not achievable due to legal requirements.