When creating new accounts or changing passwords, most sites ask for the new password to be entered twice, to ensure against inadvertent typos. It seems that in addition to current-password and new-password, perhaps there should be a confirm-password value to support ensuring that any password managers or other tools can understand the two password fields properly.
The intent is just to use new-password twice.
Closing since this doesn't appear to be a bug in the spec, but happy to continue discussing in the closed thread.
Most helpful comment
The intent is just to use new-password twice.
Closing since this doesn't appear to be a bug in the spec, but happy to continue discussing in the closed thread.