[transition] CR Request for Web Authentication Level 3 - webauthn-3

This is a transition request for a Candidate Recommendation
CR Request for Web Authentication Level 3 - webauthn-3
from https://github.com/w3c/transitions/issues/753

# Document title, URLs, estimated publication date

Web Authentication: An API for accessing Public Key Credentials Level 3
WD https://www.w3.org/TR/2025/WD-webauthn-3-20250127/
ED https://w3c.github.io/webauthn/

Moving forward after CR : 28 days after CR

# Abstract
https://www.w3.org/TR/webauthn-3/#abstract

# Status
https://www.w3.org/TR/webauthn-3/#sotd 

Addition for CR:

> [...]
> For the Web Authentication specification to move to beyond CR we must show two browser implementations supporting the new features and extensions. The spec will be run through the Level 3 on the experimental Web Platform Tests.
> 
> [...]
> 
> This Candidate Recommendation is not expected to advance to Proposed Recommendation any earlier than 19 December 2025.

# Link to group's decision to request transition
[https://www.w3.org/2024/12/18-webauthn-minutes.html?#7cd1](https://www.w3.org/2024/12/18-webauthn-minutes.html?12312312#7cd1) 

# Changes
https://www.w3.org/TR/webauthn-3/#revision-history

# Requirements satisfied
N/A

# Dependencies met (or not)

Considering the groups present in the [charter](https://www.w3.org/2024/04/wg-webauthn-charter.html#coordination):
 - **W3C groups:** There is significant cross-participation across the various groups, both by the editors and by the groups, thanks also to cross-meetings during the various TPACs, particularly for the payments section.
 - **External groups**: there has been formal communication with 
    - [IETF SecDir](https://mailarchive.ietf.org/arch/msg/saag/iMVJFpEjf0Rj4G2hK0jMcLJhGqU/)
    - [FIDO (Team only)](https://lists.w3.org/Archives/Team/w3t-archive/2025Apr/0097.html)

# Wide Review

**Design**: 
- [Request](https://github.com/w3ctag/design-reviews/issues/1085)
- [No Issues](https://github.com/w3c/webauthn/issues?q=state%3Aopen%20label%3Atag-needs-resolution)

**Accessibility**: 
- [Request](https://github.com/w3c/a11y-request/issues/101)
- [No issues]( https://github.com/w3c/webauthn/issues?q=state%3Aopen%20label%3Aa11y-needs-resolution)

**Internationalization**:
- [Request](https://github.com/w3c/i18n-request/issues/257)
- [only old issues open](https://github.com/w3c/webauthn/issues?q=state%3Aopen%20label%3Ai18n-needs-resolution)

**Security**: 
 - [Request](https://github.com/w3c/security-request/issues/90#issuecomment-3357708982)
 - [No issues]( https://github.com/w3c/webauthn/issues?q=is%3Aissue%20state%3Aopen%20label%3Asecurity-needs-resolution)

**Privacy**: 
- [Request](https://github.com/w3cping/privacy-request/issues/162)
- [Issues](https://github.com/w3c/webauthn/issues?q=is%3Aissue%20state%3Aopen%20label%3Aprivacy-needs-resolution)
- [Mail discussion](https://lists.w3.org/Archives/Team/w3t-archive/2025Nov/0057.html)

# Issues addressed
https://github.com/w3c/webauthn/milestone/32 

# Formal Objections
No

# Implementation
https://github.com/w3c/webauthn/issues/2249
https://wpt.fyi/results/webauthn?label=experimental&label=master&aligned

 # Patent disclosures
https://www.w3.org/groups/wg/webauthn/ipr/


-- 
This email was generated automatically using https://github.com/w3c/transition-issues-bot

Received on Wednesday, 19 November 2025 15:31:36 UTC