Request to Update Candidate Recommendation for WebAuthn API

*#Title:*
Web Authentication: An API for accessing Public Key Credentials
Level 1

*#URL:*
https://www.w3.org/TR/2018/CR-webauthn-20180320/

*# Abstract*
This specification defines an API enabling the creation and use of
strong, attested,
scoped, public key-based credentials by web applications, for the purpose
of strongly authenticating users.

*#Link to previous CR Transition*
https://lists.w3.org/Archives/Member/chairs/2018JanMar/0096.html

*#Decision to request transition:*
https://www.w3.org/2018/07/25-webauthn-minutes.html
*https://lists.w3.org/Archives/Public/public-webauthn/2018Jul/0440.html
<https://lists.w3.org/Archives/Public/public-webauthn/2018Jul/0440.html>*

*#Changes*
*Diff from previous published draft:*
https://services.w3.org/htmldiff?doc1=https%3A%2F%
2Fwww.w3.org%2FTR%2Fwebauthn%2F&doc2=https%3A%2F%2Fw3c.
github.io%2Fwebauthn%2F

*Closed PRs*
https://github.com/w3c/webauthn/pulls?utf8=%E2%9C%93&
q=is%3Apr+closed%3A%3E2018-03-20++

*The revised Candidate Recommendation​ ​supersedes the previous
recommendation.*

*#Requirements satisfied?*
Scope of API features was not altered.
https://www.w3.org/2017/03/web-authentication-charter.html#history

*#Dependencies met or not*
Met. No changes.


*​#​Wide Review*
All changes for transition were due to feedback received during review at
original move to CR (2018 03 20).

Including:
Web Payments; Demo implementation https://www.w3.org/2018/06/
lyra-webauthpay.mp4
FIDO Alliance FIDO2 WG review (no public notice)
Browser adoption: Chrome, Firefox, Edge (beta)

WGs listed as dependent solicited for review:
https://lists.w3.org/Archives/Public/public-webauthn/2018Jul/0558.html


*#Issues addressed*
https://github.com/w3c/webauthn/pulls?utf8=%E2%9C%93&
q=is%3Apr+closed%3A%3E2018-03-20+

*#Formal Objections*
None

​*# C*
*hanges in implementation information*
The Webauthn API is now supported in two shipping browsers (Chrome,
Firefox), and one beta browser (Edge): A fourth interop is planned 2018 07
27.

*#Deadline for further comments*
Please provide feedback by 2018 08 30
File an issue in the GitHub repository
https://github.com/w3c/webauthn

*#Change in Patent Disclosures*
None

*#At Risk*
We have multiple interoperable implementations of the AppID extension,
validating the
​ ​
WebAuthn extensions framework. All other extensions are "at risk". If there
are not multiple interoperable implementations, each may independently be
removed or made informative at Proposed Recommendation.

Received on Thursday, 26 July 2018 20:38:50 UTC