public-webauthn@w3.org from September 2019 by author

=Drummond Reed

Re: Request for joint meeting during TPAC (Wednesday, 4 September)

=JeffH

[w3c/webauthn] (Friday, 20 September)
[w3c/webauthn] 2b435a: fix publickey-credentials feature identifier tag (... (Friday, 20 September)
[w3c/webauthn] 0c7673: fix publickey-credentials feature identifier tag (Monday, 16 September)
[w3c/webauthn] 97e659: fix #1277: webauthn -> publickey-credentials (#1284) (Wednesday, 4 September)

=JeffH via GitHub

Re: [webauthn] Length restriction on user handles has no processing model associated with it (#1302) (Friday, 20 September)
Re: [webauthn] Consider rewording restrictions around origin (#1297) (Friday, 20 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Friday, 20 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Friday, 20 September)
[webauthn] new commits pushed by equalsJeffH (Friday, 20 September)
[webauthn] Merged Pull Request: fix publickey-credentials feature identifier tag (Friday, 20 September)
[webauthn] new commits pushed by equalsJeffH (Friday, 20 September)
[webauthn] Merged Pull Request: Divide security/privacy considerations into subsections by audience (Friday, 20 September)
Closed: [webauthn] Divide Security/Privacy Considerations into subsections by audience? (#1039) (Friday, 20 September)
[webauthn] Pull Request: fix publickey-credentials feature identifier tag (Monday, 16 September)
[webauthn] new commits pushed by equalsJeffH (Monday, 16 September)
Re: [webauthn] Requiring user gesture to call WebAuthn API (#1293) (Wednesday, 11 September)
Re: [webauthn] Supply an “intention" member in PublicKeyCredentialCreationOptions dictionary (#1292) (Wednesday, 11 September)
Re: [webauthn] Divide security/privacy considerations into subsections by audience (#1298) (Wednesday, 11 September)
Re: [webauthn] Add privacy considerations about credential IDs (#1250) (Wednesday, 11 September)
Re: [webauthn] Add a WebDriver Virtual Authenticator extension (#1256) (Tuesday, 10 September)
[webauthn] new commits pushed by equalsJeffH (Monday, 9 September)
[webauthn] Merged Pull Request: (Deja vu) webauthn => publickey-credentials (Monday, 9 September)
[webauthn] Merged Pull Request: rename feature-identifier token: webauthn -> publickey-credentials (fix #1277) (Wednesday, 4 September)
Closed: [webauthn] rename "webauthn" feature policy token to "publickey-credentials" (#1277) (Wednesday, 4 September)
[webauthn] new commits pushed by equalsJeffH (Wednesday, 4 September)
Re: [webauthn] Improve authenticator taxonomy section (#1270) (Wednesday, 4 September)
Re: [webauthn] rename feature-identifier token: webauthn -> publickey-credentials (fix #1277) (#1284) (Wednesday, 4 September)

Ackermann Yuriy

Re: [webauthn] Consider rewording restrictions around origin (#1297) (Wednesday, 18 September)

Ackermann Yuriy via GitHub

Re: [webauthn] Consider rewording restrictions around origin (#1297) (Wednesday, 18 September)
Re: [webauthn] Consider rewording restrictions around origin (#1297) (Wednesday, 18 September)

Adam Langley via GitHub

Re: [webauthn] Consider rewording restrictions around origin (#1297) (Saturday, 14 September)
Re: [webauthn] Supply an “intention" member in PublicKeyCredentialCreationOptions dictionary (#1292) (Friday, 13 September)
Re: [webauthn] More explicitly document use cases. (#1300) (Thursday, 12 September)
[webauthn] Pull Request: More explicitly document use cases. (Thursday, 12 September)
[webauthn] Consider whether browsers should truncate `name` and `displayName`. (#1296) (Tuesday, 10 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Tuesday, 10 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Monday, 9 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Wednesday, 4 September)

Akshay Kumar via GitHub

Re: [webauthn] Explicitly prohibit use of WebAuthn from non-visible cross-origin iframes (#1303) (Friday, 20 September)
Re: [webauthn] Supply an “intention" member in PublicKeyCredentialCreationOptions dictionary (#1292) (Wednesday, 18 September)
Re: [webauthn] Requiring user gesture to call WebAuthn API (#1293) (Wednesday, 18 September)
Re: [webauthn] Low timeout bounds for inline bio enrollment of FIDO2 keys (#1286) (Wednesday, 11 September)
Re: [webauthn] Add privacy considerations about credential IDs (#1250) (Wednesday, 11 September)
Re: [webauthn] Add a WebDriver Virtual Authenticator extension (#1256) (Wednesday, 11 September)

Anders Rundgren via GitHub

Re: [webauthn] Integrate with Feature Policy and possibly Permissions and define appropriate identifier value for WebAuthn (#911) (Thursday, 5 September)

Anthony Nadalin

[w3c/webauthn] fcce61: Initial proposal to address #1287 by relaxing the ... (Wednesday, 11 September)
09/11/2019 W3C Web Authentication WG Meeting Agenda (Wednesday, 11 September)
RE: TPAC Draft WebAuth Agenda (Thursday, 5 September)
TPAC Draft WebAuth Agenda (Wednesday, 4 September)
RE: Request for joint meeting during TPAC (Wednesday, 4 September)
RE: 09/04/2019 W3C Web Authentication WG Meeting Agenda (Tuesday, 3 September)
09/04/2019 W3C Web Authentication WG Meeting Agenda (Tuesday, 3 September)
RE: Request for joint meeting during TPAC (Tuesday, 3 September)

Anthony Nadalin via GitHub

Re: [webauthn] Explicitly prohibit use of WebAuthn from non-visible cross-origin iframes (#1303) (Friday, 20 September)
Re: [webauthn] Consider rewording restrictions around origin (#1297) (Friday, 20 September)
Re: [webauthn] Certain issues in client extension pass-through specification (#1273) (Friday, 20 September)
Re: [webauthn] Specify if clients are expected to follow redirects for icon URLs (#1285) (Friday, 20 September)
Re: [webauthn] Certain issues in client extension pass-through specification (#1273) (Friday, 20 September)
[webauthn] Merged Pull Request: Initial proposal to fix #1287 (Wednesday, 11 September)
[webauthn] new commits pushed by nadalin (Wednesday, 11 September)
Closed: [webauthn] Browsers adding extensions. (#1287) (Wednesday, 11 September)

Bart via GitHub

Re: [webauthn] add indication of embedded and cross-origin operation in `collectedClientData` (#1271) (Thursday, 5 September)

Boris Zbarsky via GitHub

Re: [webauthn] Length restriction on user handles has no processing model associated with it (#1302) (Wednesday, 18 September)
[webauthn] Length restriction on user handles has no processing model associated with it (#1302) (Wednesday, 18 September)

Brent Zundel

Re: Request for joint meeting during TPAC (Tuesday, 3 September)

Christiaan Brand via GitHub

Re: [webauthn] Specify authenticator attachment for authentication operation (#1267) (Saturday, 21 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Thursday, 12 September)

David Waite via GitHub

Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Tuesday, 10 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Thursday, 5 September)
Re: [webauthn] Specify if clients are expected to follow redirects for icon URLs (#1285) (Tuesday, 3 September)

Emil Lundberg

[w3c/webauthn] (Friday, 20 September)
[w3c/webauthn] 8ed793: Divide security/privacy considerations into subsec... (Friday, 20 September)
[w3c/webauthn] 18b9fa: Add editor comment about <span> for old anchor (Wednesday, 11 September)
[w3c/webauthn] 5f3f98: Address @equalsJeffH's review comments (Wednesday, 11 September)
[w3c/webauthn] f599d9: Mention getTransports() in PublicKeyCredentialDesc... (Wednesday, 11 September)
[w3c/webauthn] 24ecf5: Formalise beginning of RP ops (Wednesday, 11 September)
[w3c/webauthn] 124347: Formalise beginning of RP ops (Wednesday, 11 September)
[w3c/webauthn] d11947: Divide security/privacy considerations into subsec... (Wednesday, 11 September)
[w3c/webauthn] 62a7b3: Add “appidExclude” extension. (Wednesday, 11 September)
[w3c/webauthn] 01ccc4: Make reason for credID privacy leak more precise a... (Thursday, 5 September)
[w3c/webauthn] (Wednesday, 4 September)
[w3c/webauthn] 6ca8be: Add RP ops step of storing new credential counter (Wednesday, 4 September)
[w3c/webauthn] (Wednesday, 4 September)
[w3c/webauthn] 71f92c: Propose second-factor use case as mitigation for u... (Wednesday, 4 September)
[w3c/webauthn] 7d2556: Address some of @equalsJeffH's review comments (Wednesday, 4 September)
[w3c/webauthn] bba65a: Address @manger's comment about 'single-factor' (Monday, 2 September)

Emil Lundberg via GitHub

Re: [webauthn] Add note about use of floating point in extensions passed through that clients do not recognize (#1307) (Wednesday, 25 September)
Re: [webauthn] Recovering from Device Loss (#931) (Friday, 20 September)
Re: [webauthn] Recovering from Device Loss (#931) (Friday, 20 September)
Re: [webauthn] Add privacy considerations about credential IDs (#1250) (Wednesday, 11 September)
[webauthn] new commits pushed by emlun (Wednesday, 11 September)
Re: [webauthn] Divide security/privacy considerations into subsections by audience (#1298) (Wednesday, 11 September)
[webauthn] new commits pushed by emlun (Wednesday, 11 September)
Re: [webauthn] Divide security/privacy considerations into subsections by audience (#1298) (Wednesday, 11 September)
[webauthn] new commits pushed by emlun (Wednesday, 11 September)
[webauthn] Pull Request: Recommend RPs to store transport hints (Wednesday, 11 September)
[webauthn] new commits pushed by emlun (Wednesday, 11 September)
[webauthn] new commits pushed by emlun (Wednesday, 11 September)
[webauthn] Pull Request: Divide security/privacy considerations into subsections by audience (Wednesday, 11 September)
[webauthn] new commits pushed by emlun (Wednesday, 11 September)
Re: [webauthn] Add privacy considerations about credential IDs (#1250) (Wednesday, 11 September)
[webauthn] new commits pushed by emlun (Wednesday, 11 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Tuesday, 10 September)
Re: [webauthn] Add privacy considerations about credential IDs (#1250) (Thursday, 5 September)
[webauthn] new commits pushed by emlun (Thursday, 5 September)
Re: [webauthn] Add privacy considerations about credential IDs (#1250) (Thursday, 5 September)
Closed: [webauthn] Missing RP ops step: initialise signature counter (#1282) (Wednesday, 4 September)
[webauthn] new commits pushed by emlun (Wednesday, 4 September)
[webauthn] Merged Pull Request: Add RP ops step of storing new credential counter (Wednesday, 4 September)
[webauthn] Minor cleanups from PR 1270 review (#1291) (Wednesday, 4 September)
Closed: [webauthn] Poor documentation of how authnr aspects (platform, UV, RK) interact (#1231) (Wednesday, 4 September)
[webauthn] Merged Pull Request: Improve authenticator taxonomy section (Wednesday, 4 September)
[webauthn] new commits pushed by emlun (Wednesday, 4 September)
[webauthn] new commits pushed by emlun (Wednesday, 4 September)
[webauthn] new commits pushed by emlun (Monday, 2 September)
Re: [webauthn] Specify if clients are expected to follow redirects for icon URLs (#1285) (Monday, 2 September)
Closed: [webauthn] webauthn should have the ability to cross platform (#1290) (Monday, 2 September)
Re: [webauthn] webauthn should have the ability to cross platform (#1290) (Monday, 2 September)

Fabian Henneke via GitHub

[webauthn] Conflict between WebAuthn and CTAP2 handling of userVerification mapping (#1306) (Saturday, 21 September)
[webauthn] Clarify relation between requireUserVerification values for MakeCredential and GetAssertion (#1305) (Saturday, 21 September)

J.C. Jones via GitHub

Re: [webauthn] Specify if clients are expected to follow redirects for icon URLs (#1285) (Friday, 20 September)
[webauthn] Explicitly prohibit use of WebAuthn from non-visible cross-origin iframes (#1303) (Friday, 20 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Friday, 20 September)
Re: [webauthn] Add a WebDriver Virtual Authenticator extension (#1256) (Tuesday, 10 September)
Re: [webauthn] Add a WebDriver Virtual Authenticator extension (#1256) (Thursday, 5 September)
Re: [webauthn] Add a WebDriver Virtual Authenticator extension (#1256) (Wednesday, 4 September)
Re: [webauthn] Add a WebDriver Virtual Authenticator extension (#1256) (Tuesday, 3 September)

jabazorius via GitHub

Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Tuesday, 10 September)
Re: [webauthn] Add a WebDriver Virtual Authenticator extension (#1256) (Tuesday, 10 September)

Janina Sajka

Re: Request for joint meeting during TPAC (Tuesday, 3 September)

Jeff Hodges

wrt: Add a WebDriver Virtual Authenticator extension #1256 (Friday, 20 September)

Jiewen Tan via GitHub

Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Wednesday, 18 September)
Re: [webauthn] Requiring user gesture to call WebAuthn API (#1293) (Wednesday, 18 September)
Re: [webauthn] Supply an “intention" member in PublicKeyCredentialCreationOptions dictionary (#1292) (Wednesday, 18 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Tuesday, 10 September)
Re: [webauthn] Requiring user gesture to call WebAuthn API (#1293) (Friday, 6 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Friday, 6 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Thursday, 5 September)
Re: [webauthn] Supply an “intention" member in PublicKeyCredentialCreationOptions dictionary (#1292) (Thursday, 5 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Thursday, 5 September)
[webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Wednesday, 4 September)
[webauthn] Requiring user gesture to call WebAuthn API (#1293) (Wednesday, 4 September)
[webauthn] Supply an “intention" member in PublicKeyCredentialCreationOptions dictionary (#1292) (Wednesday, 4 September)

John Bradley via GitHub

Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Thursday, 12 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Thursday, 12 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Wednesday, 11 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Wednesday, 11 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Sunday, 8 September)
Re: [webauthn] Supply an “intention" member in PublicKeyCredentialCreationOptions dictionary (#1292) (Friday, 6 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Thursday, 5 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Wednesday, 4 September)
Re: [webauthn] Specify if clients are expected to follow redirects for icon URLs (#1285) (Tuesday, 3 September)

Ken Ebert

Re: Request for joint meeting during TPAC (Wednesday, 4 September)

Ki-Eun Shin via GitHub

Re: [webauthn] Requiring user gesture to call WebAuthn API (#1293) (Thursday, 19 September)
Re: [webauthn] Supply an “intention" member in PublicKeyCredentialCreationOptions dictionary (#1292) (Thursday, 19 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Thursday, 5 September)
Re: [webauthn] Supply an “intention" member in PublicKeyCredentialCreationOptions dictionary (#1292) (Thursday, 5 September)

Lucas Garron via GitHub

Re: [webauthn] Consider whether browsers should truncate `name` and `displayName`. (#1296) (Friday, 13 September)
Re: [webauthn] What if the user has no displayName? (#1283) (Friday, 13 September)
Re: [webauthn] Supply an “intention" member in PublicKeyCredentialCreationOptions dictionary (#1292) (Wednesday, 4 September)

Maciej Stachowiak via GitHub

Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Wednesday, 11 September)
Re: [webauthn] Supply an “intention" member in PublicKeyCredentialCreationOptions dictionary (#1292) (Wednesday, 11 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Tuesday, 10 September)
Re: [webauthn] Removing “lightning” from AuthenticatorTransport (#1294) (Sunday, 8 September)

Matteo via GitHub

Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954) (Saturday, 21 September)

Max Hata via GitHub

Re: [webauthn] Add privacy considerations about credential IDs (#1250) (Thursday, 5 September)
Re: [webauthn] Add privacy considerations about credential IDs (#1250) (Thursday, 5 September)
Re: [webauthn] Add privacy considerations about credential IDs (#1250) (Thursday, 5 September)

Mike Jones via GitHub

[webauthn] Pull Request: Add note about use of floating point in extensions passed through that clients do not recognize (Tuesday, 24 September)
Re: [webauthn] Certain issues in client extension pass-through specification (#1273) (Tuesday, 24 September)

Peter Occil via GitHub

Re: [webauthn] Add note about use of floating point in extensions passed through that clients do not recognize (#1307) (Wednesday, 25 September)
Re: [webauthn] Add note about use of floating point in extensions passed through that clients do not recognize (#1307) (Tuesday, 24 September)

Robert Linder

[w3c/webauthn] 4b3638: (Deja vu) webauthn => publickey-credentials (#1295) (Monday, 9 September)

Robert Linder via GitHub

Re: [webauthn] (Deja vu) webauthn => publickey-credentials (#1295) (Saturday, 7 September)
[webauthn] Pull Request: (Deja vu) webauthn => publickey-credentials (Saturday, 7 September)

Rolf Lindemann via GitHub

[webauthn] way to return a platform specific Name for the thing that gets registered. (#1304) (Friday, 20 September)
Re: [webauthn] Requiring user gesture to call WebAuthn API (#1293) (Thursday, 5 September)
Re: [webauthn] rename feature-identifier token: webauthn -> publickey-credentials (fix #1277) (#1284) (Wednesday, 4 September)

Shane B Weeden

Re: 09/04/2019 W3C Web Authentication WG Meeting Agenda (Wednesday, 4 September)

Shane Weeden via GitHub

Re: [webauthn] Consider rewording restrictions around origin (#1297) (Wednesday, 18 September)
Re: [webauthn] Consider rewording restrictions around origin (#1297) (Wednesday, 18 September)
Re: [webauthn] Consider rewording restrictions around origin (#1297) (Saturday, 14 September)
[webauthn] Consider rewording restrictions around origin (#1297) (Tuesday, 10 September)

sysbot+ipp@w3.org

[Reminder] Call for Exclusions: Web Authentication:An API for accessing Public Key Credentials Level 2 (Tuesday, 3 September)

WebAuthnBot

[w3c/webauthn] 808af0: Built by Travis-CI: 2b435a77f7ab5968e1713accaf5a76... (Friday, 20 September)
[w3c/webauthn] f054fe: Built by Travis-CI: 2b435a77f7ab5968e1713accaf5a76... (Friday, 20 September)
[w3c/webauthn] 82c51c: Built by Travis-CI: 8ed793fa733bb50481ff5dd791e9f7... (Friday, 20 September)
[w3c/webauthn] 50b086: Built by Travis-CI: 8ed793fa733bb50481ff5dd791e9f7... (Friday, 20 September)
[w3c/webauthn] ae1f64: Built by Travis-CI: 32c216ce37122d9499ebdebc660d0b... (Wednesday, 11 September)
[w3c/webauthn] d3e06d: Built by Travis-CI: 32c216ce37122d9499ebdebc660d0b... (Wednesday, 11 September)
[w3c/webauthn] b24098: Built by Travis-CI: 4b3638814bd9cb1dc7e575f8d6094d... (Monday, 9 September)
[w3c/webauthn] 686882: Built by Travis-CI: 4b3638814bd9cb1dc7e575f8d6094d... (Monday, 9 September)
[w3c/webauthn] 0cdae3: Built by Travis-CI: 8667dbe39baceb09baea3bf6bd4677... (Wednesday, 4 September)
[w3c/webauthn] 8d7a3e: Built by Travis-CI: 8667dbe39baceb09baea3bf6bd4677... (Wednesday, 4 September)
[w3c/webauthn] b29e0e: Built by Travis-CI: 97e659db6621dced069e4263ced5c9... (Wednesday, 4 September)
[w3c/webauthn] 498f25: Built by Travis-CI: aded02035e6e63fc58f7508c21e700... (Wednesday, 4 September)

WebAuthnBot via GitHub

[webauthn] new commits pushed by WebAuthnBot (Friday, 20 September)
[webauthn] new commits pushed by WebAuthnBot (Friday, 20 September)
[webauthn] new commits pushed by WebAuthnBot (Friday, 20 September)
[webauthn] new commits pushed by WebAuthnBot (Friday, 20 September)
[webauthn] new commits pushed by WebAuthnBot (Wednesday, 11 September)
[webauthn] new commits pushed by WebAuthnBot (Wednesday, 11 September)
[webauthn] new commits pushed by WebAuthnBot (Monday, 9 September)
[webauthn] new commits pushed by WebAuthnBot (Monday, 9 September)
[webauthn] new commits pushed by WebAuthnBot (Wednesday, 4 September)
[webauthn] new commits pushed by WebAuthnBot (Wednesday, 4 September)
[webauthn] new commits pushed by WebAuthnBot (Wednesday, 4 September)
[webauthn] new commits pushed by WebAuthnBot (Wednesday, 4 September)

Wendy Seltzer

Re: TPAC Draft WebAuth Agenda -- remote participation details (Wednesday, 11 September)

xueyuan

Web Authentication Working Group Charter Extended until 30 October 2019 (Monday, 2 September)

Last message date: Wednesday, 25 September 2019 11:44:11 UTC