diff --git a/index.bs b/index.bs index c7de61dcf..6493cd9c7 100644 --- a/index.bs +++ b/index.bs @@ -5959,7 +5959,8 @@ a numbered step. If outdented, it (today) is rendered as a bullet in the midst o 1. Verify that the [=rpIdHash=] in |authData| is the SHA-256 hash of the [=RP ID=] expected by the [=[RP]=]. -1. Verify that the [=UP=] bit of the [=flags=] in |authData| is set, unless |options|.{{CredentialCreationOptions/mediation}} is set to {{CredentialMediationRequirement/conditional}}. +1. If |options|.{{CredentialCreationOptions/mediation}} is not set to {{CredentialMediationRequirement/conditional}}, + verify that the [=UP=] bit of the [=flags=] in |authData| is set. 1. If the [=[RP]=] requires [=user verification=] for this registration, verify that the [=authData/flags/UV=] bit of the [=flags=] in |authData| is set.