Google Browser/FedCM team exploring native APIs for CHAPI

Hi all, exciting news (and a request for the CCG Chairs below).

DmitriZ, a handful of IIW attendees, and I had a chat with Sam Goto at
the Internet Identity Workshop last week about providing the
Credential Handler API[1] (CHAPI) with the necessary native browser
API calls to make the experience smoother and browser native.

Sam has kindly written up where we got to at IIW after multiple
meetings and has even implemented a compelling native demo in Chromium
demonstrating how we could achieve open wallet selection! There is an
explanation of how CHAPI works and how it might integrate with FedCM
here (so I won't repeat what's already in the issue in this email, go
here to read more):

https://github.com/fedidcg/FedCM/issues/374

The reason this is exciting to the CCG is because there is a very real
interest by a browser vendor in making what we call "open wallet
selection" natively supported in the browser, primarily through CHAPI.
It turns out CHAPI has made many of the same design decisions that
FedCM has made and that there is alignment for a variety of reasons
that have nothing to do with DIDs or VCs.

Sam believes that we can make progress through Google Chrome "canary"
releases (nightly experimental builds that all of us can download and
use with the new functionality built in). If this happens, Digital
Bazaar will commit time and financial resources to using those
experimental native browser APIs and integrating them with the CHAPI
polyfill to upgrade to a native experience if one exists (while
falling back to what's there today in every browser if a native
experience isn't possible).

The next steps are that the Google FedCM team would like to present
this idea to the CCG and would like us to come and present about
CHAPI+FedCM to the FedCM CG.

So, this is a request to the CCG Chairs to put aside time on an
upcoming CCG call to discuss this exciting development with the Google
FedCM team.

-- manu

PS: Huge shout out to DmitriZ for making this happen -- the first 20
times he (and TobiasL) approached me about it, I was like: "pffff,
like that's gonna happen... FedCM cares about existing login flows,
not CHAPI." -- See, SteveC, proof that I don't know what I'm talking
about from time to time! :P

[1]https://w3c-ccg.github.io/credential-handler-api/

-- 
Manu Sporny - https://www.linkedin.com/in/manusporny/
Founder/CEO - Digital Bazaar, Inc.
News: Digital Bazaar Announces New Case Studies (2021)
https://www.digitalbazaar.com/

Received on Tuesday, 22 November 2022 16:51:24 UTC