Weekly github digest (FedID WG topics of interest)

Issues
------
* w3c-fedid/FedCM (+0/-0/💬1)
  1 issues received 1 new comments:
  - #820 DPoP for FedCM (natively) (1 by ThisIsMissEm)
    https://github.com/w3c-fedid/FedCM/issues/820 

* WICG/digital-credentials (+3/-5/💬4)
  3 issues created:
  - IPIADDRESS.COM (by wawmart2-del)
    https://github.com/w3c-fedid/digital-credentials/issues/497 
  - Rate limiting: implementer considerations (by marcoscaceres)
    https://github.com/w3c-fedid/digital-credentials/issues/495 [security-considerations] 
  - Protocol Integrity Requirements for Request/Response Tampering (by simoneonofri)
    https://github.com/w3c-fedid/digital-credentials/issues/494 [security-tracker] [agenda+] [security-considerations] 

  3 issues received 4 new comments:
  - #489 Transport-only model with delegated behavior... API (1 by marcoscaceres)
    https://github.com/w3c-fedid/digital-credentials/issues/489 [privacy-tracker] [security-tracker] 
  - #440 Publish and link the Threat Model for Digital Credentials API (2 by marcoscaceres)
    https://github.com/w3c-fedid/digital-credentials/issues/440 
  - #433 Canonical test objects for OpenID4VP and Openid4VCI (1 by marcoscaceres)
    https://github.com/w3c-fedid/digital-credentials/issues/433 [test suite] [awaiting-pr] 

  5 issues closed:
  - Publish and link the Threat Model for Digital Credentials API https://github.com/w3c-fedid/digital-credentials/issues/440 
  - Adding Signature as Response for Tampering and consider Encryption https://github.com/w3c-fedid/digital-credentials/issues/479 [security-tracker] [security-considerations] 
  - Canonical test objects for OpenID4VP and Openid4VCI https://github.com/w3c-fedid/digital-credentials/issues/433 [test suite] [awaiting-pr] 
  - Transport-only model with delegated behavior... API https://github.com/w3c-fedid/digital-credentials/issues/489 [privacy-tracker] [security-tracker] 
  - Revise introduction and abstract https://github.com/w3c-fedid/digital-credentials/issues/361 



Pull requests
-------------
* w3c-fedid/FedCM (+0/-0/💬11)
  2 pull requests received 11 new comments:
  - #821 Allow IDPs to delegate well-known file hosting via DNS TXT record (9 by hlflanagan, npm1, will-bartlett)
    https://github.com/w3c-fedid/FedCM/pull/821 
  - #815 Enabling IDP Interception in FedCM Request (2 by npm1, pottis)
    https://github.com/w3c-fedid/FedCM/pull/815 

* WICG/digital-credentials (+5/-0/💬9)
  5 pull requests submitted:
  - 496  (by marcoscaceres)
    https://github.com/w3c-fedid/digital-credentials/pull/496 
  - 493  (by simoneonofri)
    https://github.com/w3c-fedid/digital-credentials/pull/493 
  - 492  (by github-actions)
    https://github.com/w3c-fedid/digital-credentials/pull/492 
  - 491  (by marcoscaceres)
    https://github.com/w3c-fedid/digital-credentials/pull/491 
  - 490  (by github-actions)
    https://github.com/w3c-fedid/digital-credentials/pull/490 

  7 pull requests received 9 new comments:
  - #493 Add Request/Respose Tampering Security Considerations (1 by marcoscaceres)
    https://github.com/w3c-fedid/digital-credentials/pull/493 [security-tracker] [security-considerations] 
  - #492 Tidied up document using tidy-html5 (1 by w3cbot)
    https://github.com/w3c-fedid/digital-credentials/pull/492 
  - #490 Tidied up document using tidy-html5 (1 by w3cbot)
    https://github.com/w3c-fedid/digital-credentials/pull/490 
  - #487 Adding Signature as Response for Tampering (2 by marcoscaceres)
    https://github.com/w3c-fedid/digital-credentials/pull/487 [security-tracker] [security-considerations] 
  - #483 Editorial: rename "Request data" to "Presentation request data" (1 by marcoscaceres)
    https://github.com/w3c-fedid/digital-credentials/pull/483 
  - #480 Add Unauthorized Cross-Origin Access and mitigation (2 by marcoscaceres)
    https://github.com/w3c-fedid/digital-credentials/pull/480 [security-considerations] 
  - #381 User Agent Automation and WebDriver test support (1 by marcoscaceres)
    https://github.com/w3c-fedid/digital-credentials/pull/381 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c-fedid/FedCM
* https://github.com/w3c-fedid/proposals
* https://github.com/w3c-fedid/login-status
* https://github.com/w3c-fedid/idp-registration
* https://github.com/w3c-fedid/multi-idp
* https://github.com/w3c-fedid/custom-requests
* https://github.com/w3c-fedid/active-mode
* https://github.com/w3c-fedid/delegation
* https://github.com/fedidcg/LightweightFedCM
* https://github.com/fedidcg/proposals
* https://github.com/WICG/digital-credentials
* https://github.com/privacycg/is-logged-in


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 13 April 2026 17:01:56 UTC