diff --git a/index.bs b/index.bs index 6fac0abec..0e9dc593c 100644 --- a/index.bs +++ b/index.bs @@ -5635,7 +5635,8 @@ a numbered step. If outdented, it (today) is rendered as a bullet in the midst o 1. Verify that the [=rpIdHash=] in |authData| is the SHA-256 hash of the [=RP ID=] expected by the [=[RP]=]. -1. Verify that the [=UP=] bit of the [=flags=] in |authData| is set, unless |options|.{{CredentialCreationOptions/mediation}} is set to {{CredentialMediationRequirement/conditional}}. +1. If |options|.{{CredentialCreationOptions/mediation}} is not set to {{CredentialMediationRequirement/conditional}}, + verify that the [=UP=] bit of the [=flags=] in |authData| is set. 1. If the [=[RP]=] requires [=user verification=] for this registration, verify that the [=authData/flags/UV=] bit of the [=flags=] in |authData| is set.