1 · Create a passkey
2 · Log in with a passkey
3 · Session cookie on this host
After a login the server sets art_ror_session scoped like Ping's session cookie. The probe buttons ask this host to set a cookie for another domain: the browser must drop those that do not cover this host.
4 · Same test from the other origins
5 · Browser capabilities
6 · /.well-known/webauthn behaviour
Switches what the RP ID host serves, for every visitor. Reset to ok when done.