07/06/2016 W3C Web Authentication WG Call Agenda
07/27/2016 W3C Web Authentication WG Agenda
[w3c/webauthn]
[w3c/webauthn] 066351: TravisCI Fix: Don't update gh-pages for non-master...
[w3c/webauthn] 067d26: Extend the signature format to also include the RP...
[w3c/webauthn] 07d436: Built by Travis-CI: a338394a49d2b8237f0fbeb44c3baa...
[w3c/webauthn] 140d68: Built by Travis-CI: 55d376463b8f5e45074a2578342f99...
[w3c/webauthn] 1bebfa: Built by Travis-CI: d34e23f986cc9b93c143b77c3a2de0...
[w3c/webauthn] 29fa8e: Pin to html5lib 0.9999999
[w3c/webauthn] 2adf0d: Built by Travis-CI: c55b57b5bbcf63dc06efbf7c5dd827...
[w3c/webauthn] 2b671c: RP ID should be in clientData, so RP can validate ...
[w3c/webauthn] 2dc57e: Built by Travis-CI: 2d07450b288b4fc3b145851a6a4b8f...
[w3c/webauthn] 2f6909: Stop using .gitattributes from w3c/html [2]
[w3c/webauthn] 34920a: Built by Travis-CI: 4c4060a0011c3d64e54261cc4882f8...
[w3c/webauthn] 352a7d: Built by Travis-CI: 81934c9801e029ba1e92b2d47ff1a5...
[w3c/webauthn] 3a08cd: Secure context requirement: SHOULD -> MUST
[w3c/webauthn] 4452be: Built by Travis-CI: ac2b718cf0dc968bf2e9fdc0ff1b30...
[w3c/webauthn] 4c4060: Extend the signature format to also include the RP...
[w3c/webauthn] 51dacf: Built by Travis-CI: 2c2f9095947ff2f2ca9caf6a9bac15...
[w3c/webauthn] 5370b4: Tidy up line lengths
[w3c/webauthn] 5396ef: Built by Travis-CI: f734bd1884452de7fc5451908e15ce...
[w3c/webauthn] 551f4f: Built by Travis-CI: 55a7b1f62b5814f92be3c25a3b4b16...
[w3c/webauthn] 57378b: Built by Travis-CI: cfcd9588cd434c5dd3d2e743b07a15...
[w3c/webauthn] 58ca1a: Clarify getAssertion wording
[w3c/webauthn] 59c3cf: Built by Travis-CI: 2b671cdfbbe7b0c79d0fc0e1386c16...
[w3c/webauthn] 640a94: Built by Travis-CI: fc897a81eec4918d82a1f9280258a5...
[w3c/webauthn] 66ed07: Replace facet with origin
[w3c/webauthn] 6c9da4: Built by Travis-CI: c1034168ef9c868ac1132a7dcf0098...
[w3c/webauthn] 779377: Built by Travis-CI: 87205a97edb11c01a92fb08b22491a...
[w3c/webauthn] 7a7ffd: Built by Travis-CI: a6695b22492bb0b1c19b8abe94c4b8...
[w3c/webauthn] 7b577d: API aesthetic updates (#142)
[w3c/webauthn] 81934c: do not address issue #88 here - thats a separate o...
[w3c/webauthn] 842616: step 1: renamed attestation type to attestation fo...
[w3c/webauthn] 87205a: Experiment with Credential object and getAssertion...
[w3c/webauthn] 8b1697: Move attestation type definitions to their own top...
[w3c/webauthn] 8cc3be: Clean up authenticator processing sections
[w3c/webauthn] 8e2659: Built by Travis-CI: c0e61c1280fc2e26db2b421d7cf6d8...
[w3c/webauthn] 9636ca: Various minor technical fixes (#147)
[w3c/webauthn] 9a9497: Built by Travis-CI: 29fa8ee6bb6136f23a50f478b5fabd...
[w3c/webauthn] a33839: UTF-16 -> UTF-8
[w3c/webauthn] a525ed: Stop using .gitattributes from w3c/html
[w3c/webauthn] a85079: Built by Travis-CI: 385fd5d7951348afe68d4a0c2fe00c...
[w3c/webauthn] ac2b71: moved AAGUID into packed attestation core. Removed...
[w3c/webauthn] b1d4df: Built by Travis-CI: 7b577d46678415c7722f5d25ea3328...
[w3c/webauthn] b67782: Built by Travis-CI: 6855bf00aca639c0c631f4aa8239e4...
[w3c/webauthn] bd2bbc: Built by Travis-CI: 3299eccb6c3e3196aa60bc68c4c7b4...
[w3c/webauthn] c55b57: IDL cleanup: replace optional parameters with a si...
[w3c/webauthn] c8af79: Built by Travis-CI: 067d26d777d76d194012097c907209...
[w3c/webauthn] cdb89a: reverted to original .gitattributes
[w3c/webauthn] ce9a35: Built by Travis-CI: 06635127fd55cfde58fc37dd6c913e...
[w3c/webauthn] cf2805: Built by Travis-CI: f3cc9df06780a2ae36f7920a3f39f2...
[w3c/webauthn] d34e23: Disable default binary types in .gitattributes
[w3c/webauthn] d870e5: Built by Travis-CI: 2f690996c6fdd8f9cfc80403fe7990...
[w3c/webauthn] d98813: Built by Travis-CI: 2f690996c6fdd8f9cfc80403fe7990...
[w3c/webauthn] dd9a4d: Built by Travis-CI: 9636ca2600c11d28aa124eb0ff1b12...
[w3c/webauthn] e3763e: Built by Travis-CI: 821173e1a40cc43331e2bbec27568f...
[w3c/webauthn] ef0306: Built by Travis-CI: a525ed329df9c427ecb6b3eae0f0df...
[w3c/webauthn] ef2874: Built by Travis-CI: cdb89a283a2ab047752d8c15d0357c...
[w3c/webauthn] f13bf4: Built by Travis-CI: 7b577d46678415c7722f5d25ea3328...
[w3c/webauthn] f3cc9d: Experiment with removing Credential object
[w3c/webauthn] f4c957: Built by Travis-CI: 60ab05dc1e16c9b9f28195e9e3cf41...
[w3c/webauthn] f73195: Built by Travis-CI: 0f30f4bcb68a81028e26454f626a18...
[webauthn] "version 4 GUID" should be "version 4 UUID"
[webauthn] AAGUID must be a "version 4 UUID" ?
[webauthn] add references to IANA WebAuthn Attestation Types and Extension Identifiers Registries
[webauthn] API aesthetic updates
[webauthn] Attestation type identifiers lack formal definition and matching rules
[webauthn] better explain the relation between attestation models and attestation types
[webauthn] Change Android SafetyNet attestation type identifier ?
[webauthn] Clarify how a user can authenticate from multiple devices
[webauthn] Client processing steps are not aligned with authenticator model
[webauthn] credential id privacy
[webauthn] CredentialType (was: TAG review feedback: Align Credential interface with Credential Management?
[webauthn] define "attestation" in terminology section
[webauthn] do we need "Byte length l of AAGUID" ?
[webauthn] Extend the signature format to also include the RP ID
[webauthn] IDL cleanup: replace optional parameters with a single optional dictionary
[webauthn] imageURL privacy
[webauthn] Move AAGUID from extension to packed attestation.
[webauthn] moved AAGUID into packed attestation core. Removed AAGUID extension.
[webauthn] new commits pushed by jcjones
[webauthn] new commits pushed by rlin1
[webauthn] new commits pushed by vijaybh
- Vijay Bharadwaj via GitHub (Thursday, 28 July)
- Vijay Bharadwaj via GitHub (Wednesday, 27 July)
- Vijay Bharadwaj via GitHub (Wednesday, 27 July)
- Vijay Bharadwaj via GitHub (Monday, 25 July)
- Vijay Bharadwaj via GitHub (Friday, 22 July)
- Vijay Bharadwaj via GitHub (Friday, 22 July)
- Vijay Bharadwaj via GitHub (Thursday, 21 July)
- Vijay Bharadwaj via GitHub (Wednesday, 20 July)
- Vijay Bharadwaj via GitHub (Wednesday, 20 July)
- Vijay Bharadwaj via GitHub (Wednesday, 20 July)
- Vijay Bharadwaj via GitHub (Monday, 18 July)
- Vijay Bharadwaj via GitHub (Monday, 18 July)
- Vijay Bharadwaj via GitHub (Saturday, 16 July)
- Vijay Bharadwaj via GitHub (Saturday, 16 July)
- Vijay Bharadwaj via GitHub (Saturday, 16 July)
- Vijay Bharadwaj via GitHub (Saturday, 16 July)
- Vijay Bharadwaj via GitHub (Friday, 15 July)
- Vijay Bharadwaj via GitHub (Friday, 15 July)
- Vijay Bharadwaj via GitHub (Friday, 15 July)
- Vijay Bharadwaj via GitHub (Thursday, 14 July)
- Vijay Bharadwaj via GitHub (Thursday, 14 July)
- Vijay Bharadwaj via GitHub (Thursday, 14 July)
- Vijay Bharadwaj via GitHub (Thursday, 14 July)
- Vijay Bharadwaj via GitHub (Wednesday, 13 July)
[webauthn] new commits pushed by WebAuthnBot
- WebAuthnBot via GitHub (Thursday, 28 July)
- WebAuthnBot via GitHub (Wednesday, 27 July)
- WebAuthnBot via GitHub (Tuesday, 26 July)
- WebAuthnBot via GitHub (Monday, 25 July)
- WebAuthnBot via GitHub (Friday, 22 July)
- WebAuthnBot via GitHub (Friday, 22 July)
- WebAuthnBot via GitHub (Thursday, 21 July)
- WebAuthnBot via GitHub (Wednesday, 20 July)
- WebAuthnBot via GitHub (Wednesday, 20 July)
- WebAuthnBot via GitHub (Wednesday, 20 July)
- WebAuthnBot via GitHub (Monday, 18 July)
- WebAuthnBot via GitHub (Monday, 18 July)
- WebAuthnBot via GitHub (Saturday, 16 July)
- WebAuthnBot via GitHub (Saturday, 16 July)
- WebAuthnBot via GitHub (Saturday, 16 July)
- WebAuthnBot via GitHub (Saturday, 16 July)
- WebAuthnBot via GitHub (Friday, 15 July)
- WebAuthnBot via GitHub (Friday, 15 July)
- WebAuthnBot via GitHub (Thursday, 14 July)
- WebAuthnBot via GitHub (Thursday, 14 July)
- WebAuthnBot via GitHub (Thursday, 14 July)
- WebAuthnBot via GitHub (Thursday, 14 July)
- WebAuthnBot via GitHub (Wednesday, 13 July)
- WebAuthnBot via GitHub (Wednesday, 13 July)
- WebAuthnBot via GitHub (Wednesday, 13 July)
- WebAuthnBot via GitHub (Wednesday, 13 July)
- WebAuthnBot via GitHub (Wednesday, 13 July)
- WebAuthnBot via GitHub (Wednesday, 13 July)
- WebAuthnBot via GitHub (Wednesday, 13 July)
- WebAuthnBot via GitHub (Wednesday, 13 July)
- WebAuthnBot via GitHub (Tuesday, 12 July)
- WebAuthnBot via GitHub (Tuesday, 12 July)
- WebAuthnBot via GitHub (Monday, 4 July)
- WebAuthnBot via GitHub (Sunday, 3 July)
- WebAuthnBot via GitHub (Sunday, 3 July)
[webauthn] Problem with authn selection extension
[webauthn] Remove attestation specification from spec
- gmandyam via GitHub (Thursday, 28 July)
- =JeffH via GitHub (Thursday, 28 July)
- gmandyam via GitHub (Thursday, 28 July)
- Mike Jones via GitHub (Thursday, 28 July)
- gmandyam via GitHub (Thursday, 28 July)
- Mike Jones via GitHub (Thursday, 28 July)
- gmandyam via GitHub (Thursday, 28 July)
- =JeffH via GitHub (Thursday, 28 July)
- Vijay Bharadwaj via GitHub (Thursday, 28 July)
- Vijay Bharadwaj via GitHub (Wednesday, 20 July)
- Hodges, Jeff (Wednesday, 13 July)
- Rolf Lindemann via GitHub (Wednesday, 13 July)
[webauthn] Remove ScopedCredentialParameters tuple (by unpairing type & algorithm)
[webauthn] Rolf attestation types 121
[webauthn] ScopedCredentialInfo attestation
[webauthn] Secure context should be MUST not SHOULD
[webauthn] Security: Signature format doesn't cover whole context
[webauthn] TAG review feedback: Align Credential interface with Credential Management?
[webauthn] Text aesthetic updates
[webauthn] Various minor technical fixes
API aesthetic updates (PR #142)
API consumer question: How do we recover Credential?
- Vijay Bharadwaj (Tuesday, 19 July)
- Dirk Balfanz (Monday, 18 July)
- Hodges, Jeff (Monday, 18 July)
- Vijay Bharadwaj (Monday, 18 July)
- J.C. Jones (Sunday, 17 July)
- Vijay Bharadwaj (Saturday, 16 July)
- J.C. Jones (Friday, 15 July)
- Vijay Bharadwaj (Wednesday, 13 July)
- J.C. Jones (Wednesday, 13 July)
Attestation formats
AW: [webauthn] Security: Signature format doesn't cover whole context
AW: Attestation formats
AW: PR #137 and #138
AW: RE: PR #137 and #138
Can we remove the PSL dependency?
Closed: [webauthn] add invocation of authenticatorCancel to step 8 of makeCredential ?
Closed: [webauthn] attestation unmentioned in authenticatorMakeCredential operation
Closed: [webauthn] better explain the relation between attestation models and attestation types
Closed: [webauthn] Clarify how a user can authenticate from multiple devices
Closed: [webauthn] clarify returned values from authenticatorMakeCredential operation
Closed: [webauthn] clientDataJSON returned in WebAuthnAttestation rather than AttestationStatement
Closed: [webauthn] credentialList should be whitelist in step 6, 1st bullet, of getAssertion() processing rules
Closed: [webauthn] key-attestation: KeyHandle in attestaion rawData type="packed"
Closed: [webauthn] Key-Attestation: Packed attestation length
Closed: [webauthn] Move AAGUID from extension to packed attestation.
Closed: [webauthn] Move optional parameters and extensions into an "options" dictionary
Closed: [webauthn] Secure context should be MUST not SHOULD
Closed: [webauthn] Security: Signature format doesn't cover whole context
Credential types
draft-hodges-webauthn-registries-00
Is the getAssertion whitelist necessary?
- Hodges, Jeff (Tuesday, 26 July)
- Vijay Bharadwaj (Monday, 25 July)
- Vijay Bharadwaj (Thursday, 21 July)
- Vijay Bharadwaj (Monday, 18 July)
- Vijay Bharadwaj (Monday, 18 July)
- J.C. Jones (Sunday, 17 July)
- Hodges, Jeff (Saturday, 16 July)
- Vijay Bharadwaj (Saturday, 16 July)
- J.C. Jones (Saturday, 16 July)
Please review: PR#144 on adding RP ID to signature format
PR #137 and #138
PR for cleaning up wording around client-to-authenticator interface
Remove ScopedCredentialParameters tuple (by un-pairing type & algorithm) PR #143
returning a multi-factor authenticator's factor-in-use and protection scheme to the server
- Sarangdhar, Nitin V (Friday, 29 July)
- Ghosh, Rahuldeva (Tuesday, 26 July)
- Hodges, Jeff (Tuesday, 26 July)
- Vijay Bharadwaj (Monday, 25 July)
- Ghosh, Rahuldeva (Monday, 25 July)
- Rolf Lindemann (Sunday, 24 July)
- Ghosh, Rahuldeva (Friday, 22 July)
- Malcolm Young (Friday, 22 July)
- Ghosh, Rahuldeva (Friday, 22 July)
Signal to end-user when using webauthn
- Arshad Noor (Wednesday, 13 July)
- Vijay Bharadwaj (Tuesday, 12 July)
- Arshad Noor (Tuesday, 12 July)
- Vijay Bharadwaj (Monday, 11 July)
- Arshad Noor (Monday, 11 July)
- Vijay Bharadwaj (Monday, 11 July)
- Arshad Noor (Monday, 11 July)
- Vijay Bharadwaj (Friday, 8 July)
- Arshad Noor (Friday, 8 July)
- Vijay Bharadwaj (Wednesday, 6 July)
- Arshad Noor (Wednesday, 6 July)
- Anthony Nadalin (Tuesday, 5 July)
- Arshad Noor (Monday, 4 July)
Spec "Level"s ?
Spec status
Text aesthetic updates (PR #135)
TPAC - Web Authentication WG Meeting
wrt deprecating eTLD+1 (was: Can we remove the PSL dependency?)
wrt registries (was: Spec status)
Last message date: Friday, 29 July 2016 20:47:21 UTC