Weekly github digest (FedID WG topics of interest)

Issues
------
* w3c-fedid/FedCM (+5/-1/💬24)
  5 issues created:
  - Make it clear image fetches in the spec are uncredentialed (by npm1)
    https://github.com/w3c-fedid/FedCM/issues/779 
  - Lack of generic params on login_url is limiting, unclear privacy value (by will-bartlett)
    https://github.com/w3c-fedid/FedCM/issues/778 
  - Manifest fingerprinting via "Check accounts and login url step" (by will-bartlett)
    https://github.com/w3c-fedid/FedCM/issues/777 
  - Manifest fingerprinting via subdomains and public suffix list (by will-bartlett)
    https://github.com/w3c-fedid/FedCM/issues/776 
  - Manifest fingerprinting using branding icon (by will-bartlett)
    https://github.com/w3c-fedid/FedCM/issues/775 

  6 issues received 24 new comments:
  - #779 Make it clear image fetches in the spec are uncredentialed (1 by cbiesinger)
    https://github.com/w3c-fedid/FedCM/issues/779 
  - #778 Lack of generic params on login_url is limiting, unclear privacy value (5 by npm1, samuelgoto, will-bartlett)
    https://github.com/w3c-fedid/FedCM/issues/778 
  - #777 Manifest fingerprinting wording describes mitigation imprecisely (3 by npm1, will-bartlett)
    https://github.com/w3c-fedid/FedCM/issues/777 
  - #776 Manifest fingerprinting via subdomains and public suffix list (4 by npm1, samuelgoto, will-bartlett)
    https://github.com/w3c-fedid/FedCM/issues/776 
  - #775 Manifest fingerprinting using branding icon (2 by npm1, will-bartlett)
    https://github.com/w3c-fedid/FedCM/issues/775 
  - #80 Authentication methods on id assertion endpoint too limited (only cookies, which are bearer tokens) - service-worker mode = "all"? (9 by aaronpk, samuelgoto, will-bartlett)
    https://github.com/w3c-fedid/FedCM/issues/80 

  1 issues closed:
  - Manifest fingerprinting using branding icon https://github.com/w3c-fedid/FedCM/issues/775 

* w3c-fedid/idp-registration (+0/-0/💬2)
  1 issues received 2 new comments:
  - #1 Allow IdP registration and RPs to match on a "type" (2 by ThisIsMissEm)
    https://github.com/w3c-fedid/idp-registration/issues/1 

* w3c-fedid/delegation (+0/-0/💬2)
  1 issues received 2 new comments:
  - #4 Privacy concern: IdP learns RP after account selection (2 by iaik-jheher)
    https://github.com/w3c-fedid/delegation/issues/4 

* WICG/digital-credentials (+2/-1/💬2)
  2 issues created:
  - Add details about the Cross-device experience for the Digital Credentials API (by mohamedamir)
    https://github.com/w3c-fedid/digital-credentials/issues/369 
  - explainer: fix "do nothing" link (by npdoty)
    https://github.com/w3c-fedid/digital-credentials/issues/363 

  2 issues received 2 new comments:
  - #357 Proposal to Add Comprehensive Testing Support for the Digital Credentials API (1 by hlflanagan)
    https://github.com/w3c-fedid/digital-credentials/issues/357 [agenda+] 
  - #345 Is a registry needed? (1 by hlflanagan)
    https://github.com/w3c-fedid/digital-credentials/issues/345 [registry] [agenda+] 

  1 issues closed:
  - [Discussion] Integrate with web wallets? https://github.com/w3c-fedid/digital-credentials/issues/38 [enhancement] [pending closure] 



Pull requests
-------------
* w3c-fedid/FedCM (+0/-0/💬1)
  1 pull requests received 1 new comments:
  - #774 [FedCM] Specify third party iframe display support (1 by cbiesinger)
    https://github.com/w3c-fedid/FedCM/pull/774 

* WICG/digital-credentials (+3/-2/💬10)
  3 pull requests submitted:
  - Update the explainer to include digital credential issuance (by mohamedamir)
    https://github.com/w3c-fedid/digital-credentials/pull/364 
  - Remove redundant text in index.html (by matatk)
    https://github.com/w3c-fedid/digital-credentials/pull/362 
  - Editorial: update acknowledgements section (by bc-pi)
    https://github.com/w3c-fedid/digital-credentials/pull/358 

  5 pull requests received 10 new comments:
  - #364 docs(explainer): Update the explainer to include digital credential issuance (2 by mohamedamir)
    https://github.com/w3c-fedid/digital-credentials/pull/364 
  - #358 Editorial: update acknowledgements section (3 by TallTed, bc-pi, marcoscaceres)
    https://github.com/w3c-fedid/digital-credentials/pull/358 
  - #354 chore(explainer): fix link to risk.md from ping (3 by TallTed, marcoscaceres, npdoty)
    https://github.com/w3c-fedid/digital-credentials/pull/354 
  - #338 Editorial: make digital wallets out of scope (1 by hlflanagan)
    https://github.com/w3c-fedid/digital-credentials/pull/338 [discussion] [agenda+] 
  - #306 Define interaction between platform credential chooser and the user agent (1 by hlflanagan)
    https://github.com/w3c-fedid/digital-credentials/pull/306 [agenda+] 

  2 pull requests merged:
  - Editorial: make digital wallets out of scope
    https://github.com/w3c-fedid/digital-credentials/pull/338 [discussion] 
  - Remove redundant text in index.html
    https://github.com/w3c-fedid/digital-credentials/pull/362 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c-fedid/FedCM
* https://github.com/w3c-fedid/proposals
* https://github.com/w3c-fedid/login-status
* https://github.com/w3c-fedid/idp-registration
* https://github.com/w3c-fedid/multi-idp
* https://github.com/w3c-fedid/custom-requests
* https://github.com/w3c-fedid/active-mode
* https://github.com/w3c-fedid/delegation
* https://github.com/fedidcg/LightweightFedCM
* https://github.com/fedidcg/proposals
* https://github.com/WICG/digital-credentials
* https://github.com/privacycg/is-logged-in


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 1 September 2025 17:01:24 UTC