public-webauthn@w3.org from April 2017 by author

=JeffH

• correction to webauthn F2F Feb-2017 minutes (Wednesday, 26 April)
• Review of PR#350: Throw NotFoundError when no authenticator is available (Sunday, 23 April)
• Review of PR #409: Add User Verification (UV) bit to authenticator data (Sunday, 23 April)
• Review of PR #378 "Enable RP to choose authenticators based on key storage capability" (Sunday, 23 April)
• headzup: issues with travis-ci's bikeshed output? (Wednesday, 19 April)
• "priority:implementation" issues, and PRs left for WD-05 (Wednesday, 19 April)
• Re: merge #397, #398, #399 ? (Friday, 14 April)
• Re: merge #397, #398, #399 ? (Friday, 14 April)
• merge #397, #398, #399 ? (Friday, 14 April)
• review of PR #384 submitted (Friday, 7 April)

=JeffH via GitHub

• Re: [webauthn] address empty allowlist in 'use existing cred' alg, fixes #387 (Sunday, 30 April)
• Re: [webauthn] Throw NotFoundError when no authenticator is available (Saturday, 29 April)
• Closed: [webauthn] Throw "NotFoundError" when internal authenticator is not available or not found (Saturday, 29 April)
• [webauthn] new commits pushed by equalsJeffH (Saturday, 29 April)
• Re: [webauthn] Throw NotFoundError when no authenticator is available (Saturday, 29 April)
• Re: [webauthn] address empty allowlist in 'use existing cred' alg, fixes #387 (Friday, 28 April)
• Re: [webauthn] address empty allowlist in 'use existing cred' alg, fixes #387 (Friday, 28 April)
• Re: [webauthn] Some editing cleanup following cred man merge (Friday, 28 April)
• Re: [webauthn] Some editing cleanup following cred man merge (Friday, 28 April)
• Re: [webauthn] Some editing cleanup following cred man merge (Friday, 28 April)
• Re: [webauthn] Some editing cleanup following cred man merge (Friday, 28 April)
• Closed: [webauthn] Account information merge (Friday, 28 April)
• Re: [webauthn] Account information merge (Friday, 28 April)
• Re: [webauthn] address empty allowlist in 'use existing cred' alg, fixes #387 (Friday, 28 April)
• [webauthn] new commits pushed by equalsJeffH (Friday, 28 April)
• [webauthn] new commits pushed by equalsJeffH (Friday, 28 April)
• Re: [webauthn] leverage "credential source" term from credential management spec (Thursday, 27 April)
• [webauthn] leverage "credential source" term from credential management spec (Thursday, 27 April)
• Re: [webauthn] address empty allowlist in 'use existing cred' alg, fixes #387 (Wednesday, 26 April)
• [webauthn] new commits pushed by equalsJeffH (Wednesday, 26 April)
• Re: [webauthn] address empty allowlist in 'use existing cred' alg, fixes #387 (Wednesday, 26 April)
• [webauthn] new commits pushed by equalsJeffH (Wednesday, 26 April)
• Re: [webauthn] Add a link to web-platform-tests to the top of the spec (Wednesday, 26 April)
• Re: [webauthn] Throw NotFoundError when no authenticator is available (Wednesday, 26 April)
• [webauthn] new commits pushed by equalsJeffH (Wednesday, 26 April)
• [webauthn] new commits pushed by equalsJeffH (Tuesday, 25 April)
• Re: [webauthn] attObj and Figure 3 [[#fig-attStructs]] do not agree (Tuesday, 25 April)
• Re: [webauthn] authenticator taxonomy (Tuesday, 25 April)
• Re: [webauthn] Enable RP to choose authenticators based on key storage capability (Monday, 24 April)
• Re: [webauthn] Why was PR #409 (UV bit) merged? (Monday, 24 April)
• Re: [webauthn] Account information merge (Monday, 24 April)
• Re: [webauthn] Account information merge (Monday, 24 April)
• Re: [webauthn] rpID seems to have changed meaning a bit (Monday, 24 April)
• [webauthn] new commits pushed by equalsJeffH (Sunday, 23 April)
• Re: [webauthn] Throw NotFoundError when no authenticator is available (Sunday, 23 April)
• Re: [webauthn] Throw NotFoundError when no authenticator is available (Sunday, 23 April)
• Re: [webauthn] Throw NotFoundError when no authenticator is available (Sunday, 23 April)
• Re: [webauthn] Add User Verification (UV) bit to authenticator data (Sunday, 23 April)
• Re: [webauthn] authenticator taxonomy (Saturday, 22 April)
• [webauthn] authenticator taxonomy (Saturday, 22 April)
• Re: [webauthn] Account information merge (Saturday, 22 April)
• Re: [webauthn] Enable RP to choose authenticators based on key storage capability (Friday, 21 April)
• [webauthn] new commits pushed by equalsJeffH (Friday, 21 April)
• Re: [webauthn] attachment is only explicitly used in create() (Friday, 21 April)
• [webauthn] attachment is only explicitly used in create() (Friday, 21 April)
• Re: [webauthn] UVM Extension Editorial Change (Friday, 21 April)
• Re: [webauthn] Some editing cleanup following cred man merge (Friday, 21 April)
• Re: [webauthn] cleanup: attestation object `attObj` format not clearly delineated (Friday, 21 April)
• Re: [webauthn] Separated proposed changes to extension semantics from PR #386 and use TypeError, per @jyasskin (Friday, 21 April)
• [webauthn] new commits pushed by equalsJeffH (Friday, 21 April)
• [webauthn] UVM should be "method" rather than "mode" ? (Thursday, 20 April)
• Re: [webauthn] Add Test of User Identity (TUI) bit to authenticator data (Thursday, 20 April)
• Re: [webauthn] Add Test of User Identity (TUI) bit to authenticator data (Thursday, 20 April)
• Re: [webauthn] Replace Authenticator Model with CTAP (Wednesday, 19 April)
• [webauthn] new commits pushed by equalsJeffH (Wednesday, 19 April)
• Closed: [webauthn] Should the "authentication" attribute on Navigator be [SameObject]? (Wednesday, 19 April)
• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Wednesday, 19 April)
• Re: [webauthn] Should the "authentication" attribute on Navigator be [SameObject]? (Wednesday, 19 April)
• Re: [webauthn] Add Test of User Identity (TUI) bit to authenticator data (Wednesday, 19 April)
• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Wednesday, 19 April)
• Re: [webauthn] explain challenge's security importance and use in both registration and authentication operations (Wednesday, 19 April)
• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Tuesday, 18 April)
• Re: [webauthn] explain challenge's security importance and use in both registration and authentication operations (Tuesday, 18 April)
• Re: [webauthn] Rename ScopedCredential to PublicKeyCredential (Saturday, 15 April)
• Re: [webauthn] explain challenge's security importance and use in both registration and authentication operations (Friday, 14 April)
• [webauthn] adopt definition list markdown notation for <div dfn-type="foo" dfn-for="bar"> blocks (Friday, 14 April)
• [webauthn] new commits pushed by equalsJeffH (Friday, 14 April)
• [webauthn] new commits pushed by equalsJeffH (Friday, 14 April)
• [webauthn] new commits pushed by equalsJeffH (Friday, 14 April)
• Re: [webauthn] explain challenge's security importance and use in both registration and authentication operations (Friday, 14 April)
• Re: [webauthn] Convert `makeCredential()`'s parameters into a dictionary. (Friday, 14 April)
• Re: [webauthn] Move `getAssertion()`'s `challenge` into `AssertionOptions` (Friday, 14 April)
• Re: [webauthn] Introduce authenticator response interfaces. (Friday, 14 April)
• [webauthn] explain challenge's security importance and use in both registration and authentication operations (Friday, 14 April)
• Re: [webauthn] some RPs may wish to allow multiple registrations to same user account (Friday, 14 April)
• [webauthn] some RPs may wish to allow multiple registrations to same user account (Friday, 14 April)
• Re: [webauthn] Consider empty allowLists (Friday, 14 April)
• [webauthn] attObj and Figure 3 [[#fig-attStructs]] do not agree (Thursday, 13 April)
• Re: [webauthn] Move `getAssertion()`'s `challenge` into `AssertionOptions` (Thursday, 13 April)
• Re: [webauthn] Move `getAssertion()`'s `challenge` into `AssertionOptions` (Wednesday, 12 April)
• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Monday, 10 April)
• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Saturday, 8 April)
• Re: [webauthn] cleanup: attestation object `attObj` format not clearly delineated (Friday, 7 April)
• [webauthn] cleanup: attestation object `attObj` format not clearly delineated (Friday, 7 April)
• Re: [webauthn] do not totally lose the term "WebAuthn Relying Party" (Friday, 7 April)
• [webauthn] "credential ID" not signed over by authenticatorGetAssertion operation (Friday, 7 April)
• Re: [webauthn] normalize RFC2119 language (Friday, 7 April)
• [webauthn] rename "attestation data" to be "attested credential" (Thursday, 6 April)
• Closed: [webauthn] DOMString[] should be FrozenArray<DOMString> (Thursday, 6 April)
• Re: [webauthn] DOMString[] should be FrozenArray<DOMString> (Thursday, 6 April)
• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Wednesday, 5 April)
• Closed: [webauthn] What ensures any semblance of interop for WebAuthnExtensions? (Wednesday, 5 April)
• Re: [webauthn] What ensures any semblance of interop for WebAuthnExtensions? (Wednesday, 5 April)
• Re: [webauthn] follow Bluetooth and NFC brand usage guidance (Wednesday, 5 April)
• Re: [webauthn] authenticatorCancel seems like it can cancel too much (Wednesday, 5 April)
• Re: [webauthn] Should the "authentication" attribute on Navigator be [SameObject]? (Wednesday, 5 April)
• Re: [webauthn] "NotAllowedError" is in WebIDL editors draft but not in WebIDL Level 1 (Wednesday, 5 April)
• Re: [webauthn] "authentication" attribute on Navigator should be [SecureContext] (Wednesday, 5 April)
• Re: [webauthn] clarify normality of authenticator model - is it actually authenticator API ? (Wednesday, 5 April)
• Re: [webauthn] DOMString[] should be FrozenArray<DOMString> (Wednesday, 5 April)
• Re: [webauthn] Clarify how a user can authenticate from multiple devices (Wednesday, 5 April)
• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Wednesday, 5 April)
• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Wednesday, 5 April)
• Re: [webauthn] Spec should not mandate behavior of server (Wednesday, 5 April)
• Re: [webauthn] Eliminate duplicate terminology (Tuesday, 4 April)
• Re: [webauthn] normalizing term(s) for authenticator-generated RP-specific public key (Tuesday, 4 April)

Alexei Czeskis

• Re: merge #397, #398, #399 ? (Friday, 14 April)
• Re: merge #397, #398, #399 ? (Friday, 14 April)
• RE: PR #384 CredMan Integration (Wednesday, 12 April)
• Re: PR #384 CredMan Integration (Tuesday, 11 April)
• Re: PR #384 CredMan Integration (Tuesday, 11 April)

Alexei Czeskis via GitHub

• Re: [webauthn] Throw NotFoundError when no authenticator is available (Wednesday, 26 April)
• Re: [webauthn] Why was PR #409 (UV bit) merged? (Monday, 24 April)
• Re: [webauthn] Why was PR #409 (UV bit) merged? (Monday, 24 April)
• Re: [webauthn] Account information merge (Monday, 24 April)
• [webauthn] Why was PR #409 (UV bit) merged? (Monday, 24 April)
• [webauthn] rpID seems to have changed meaning a bit (Thursday, 20 April)
• Re: [webauthn] Account information merge (Thursday, 20 April)
• [webauthn] What does store() do? (Thursday, 20 April)
• [webauthn] Account information merge (Thursday, 20 April)
• [webauthn] RawId vs Id is confusing (Thursday, 20 April)
• Re: [webauthn] Add Test of User Identity (TUI) bit to authenticator data (Wednesday, 19 April)
• [webauthn] [PR 384] Does requireUserMediation() make sense after merge (Friday, 14 April)

Angelo Liao

• RE: Review PR 378, 428, 429 (Friday, 28 April)
• Review PR 378: (Tuesday, 25 April)
• RE: [webauthn] Add Test of User Identity (TUI) bit to authenticator data (Thursday, 20 April)
• PRs left for WD-05 (Wednesday, 19 April)
• Unknowns of the WebAuthn + CredMan merge (Thursday, 13 April)
• RE: PR #384 CredMan Integration (Tuesday, 11 April)
• RE: PR #384 CredMan Integration (Tuesday, 11 April)
• RE: PR #384 CredMan Integration (Tuesday, 11 April)
• RE: PR #384 CredMan Integration (Tuesday, 11 April)

Angelo Liao via GitHub

• [webauthn] new commits pushed by AngeloKai (Tuesday, 25 April)
• [webauthn] new commits pushed by AngeloKai (Tuesday, 25 April)
• Re: [webauthn] Why was PR #409 (UV bit) merged? (Monday, 24 April)
• Re: [webauthn] Why was PR #409 (UV bit) merged? (Monday, 24 April)
• [webauthn] new commits pushed by AngeloKai (Monday, 24 April)
• [webauthn] new commits pushed by AngeloKai (Monday, 24 April)
• Re: [webauthn] Add User Verification (UV) bit to authenticator data (Monday, 24 April)
• [webauthn] new commits pushed by AngeloKai (Monday, 24 April)
• Re: [webauthn] Add User Verification (UV) bit to authenticator data (Monday, 24 April)
• [webauthn] new commits pushed by AngeloKai (Friday, 21 April)
• Closed: [webauthn] TAG review feedback: Align Credential interface with Credential Management? (Friday, 21 April)
• Re: [webauthn] Account information merge (Thursday, 20 April)
• Re: [webauthn] Add Test of User Identity (TUI) bit to authenticator data (Thursday, 20 April)
• Re: [webauthn] Add Test of User Identity (TUI) bit to authenticator data (Wednesday, 19 April)
• [webauthn] new commits pushed by AngeloKai (Wednesday, 19 April)
• [webauthn] new commits pushed by AngeloKai (Wednesday, 19 April)
• [webauthn] new commits pushed by AngeloKai (Wednesday, 19 April)
• [webauthn] new commits pushed by AngeloKai (Wednesday, 19 April)
• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Tuesday, 18 April)
• Re: [webauthn] explain challenge's security importance and use in both registration and authentication operations (Tuesday, 18 April)
• Re: [webauthn] Introduce authenticator response interfaces. (Wednesday, 12 April)
• Closed: [webauthn] Add cloud transport option to transport hint (Thursday, 6 April)
• Re: [webauthn] Add cloud transport option to transport hint (Thursday, 6 April)
• Re: [webauthn] Too generic names? (Wednesday, 5 April)
• Re: [webauthn] Various attributes of ScopedCredentialInfo should probably be [SameObject] (Wednesday, 5 April)
• Re: [webauthn] DOMString[] should be FrozenArray<DOMString> (Wednesday, 5 April)
• Re: [webauthn] Fetch intergration for WebAuthn API (Wednesday, 5 April)
• Re: [webauthn] Eliminate duplicate terminology (Wednesday, 5 April)

Anthony Nadalin

• 04/26/2017 W3C Web Authentication WG Meeting Agenda (Tuesday, 25 April)
• 04/19/2017 W3C Web Authentication WG Meeting Agenda (Tuesday, 18 April)
• RE: merge #397, #398, #399 ? (Friday, 14 April)
• 04/14/2017 W3C Web Authentication WG Agenda (Thursday, 13 April)
• 04/12/2017 W3C Web Authentication WG Meeting Agenda (Tuesday, 11 April)
• RE: PR #384 CredMan Integration (Tuesday, 11 April)
• PR #384 CredMan Integration (Monday, 10 April)
• 04/05/2017 W3C Web Authentication WG Meeting Agenda (Tuesday, 4 April)

balfanz via GitHub

• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Friday, 7 April)

Boris Zbarsky via GitHub

• Re: [webauthn] authenticatorCancel seems like it can cancel too much (Thursday, 6 April)
• Re: [webauthn] Various attributes of ScopedCredentialInfo should probably be [SameObject] (Wednesday, 5 April)
• Re: [webauthn] authenticatorCancel seems like it can cancel too much (Wednesday, 5 April)

Dirk Balfanz

• Re: Benefits of exposing webauthn through navigator.credentials (Friday, 7 April)

Domenic Denicola via GitHub

• Re: [webauthn] DOMString[] should be FrozenArray<DOMString> (Thursday, 6 April)
• Re: [webauthn] Consider using USVString instead of DOMString sometimes (Wednesday, 5 April)
• Re: [webauthn] DOMString[] should be FrozenArray<DOMString> (Wednesday, 5 April)

GitHub

• [w3c/webauthn] ad8e59: Built by Travis-CI: b4009d4dbc3fa47aa588b11915af23... (Saturday, 29 April)
• [w3c/webauthn] 669221: Add a link to web-platform-tests to the top of the... (Saturday, 29 April)
• [w3c/webauthn] f84ba9: Built by Travis-CI: f99d7181e7f56d371bcb506f48295b... (Saturday, 29 April)
• [w3c/webauthn] f99d71: Throw NotFoundError when no authenticator is avail... (Saturday, 29 April)
• [w3c/webauthn] c21268: more surgery hopefully improving #387 (Friday, 28 April)
• [w3c/webauthn] 883c6f: Built by Travis-CI: 6d873d597fae3a595039bdfb070e29... (Friday, 28 April)
• [w3c/webauthn] 6d873d: Add displayName for the user account (#423) (Friday, 28 April)
• [w3c/webauthn] 2c7ba2: Built by Travis-CI: 5dedfde4c1e8ea8dff382fbf958479... (Thursday, 27 April)
• [w3c/webauthn] 34e083: Correct omissions that failed to send authenticato... (Thursday, 27 April)
• [w3c/webauthn] e1ffe6: surgery w/hammer, saw, torch on prior attempt to i... (Wednesday, 26 April)
• [w3c/webauthn] 5535f4: incorp jyasskin suggestion. improves #387 (Wednesday, 26 April)
• [w3c/webauthn] 76a716: address empty allowlist in 'use existing cred' alg... (Wednesday, 26 April)
• [w3c/webauthn] 6f2f11: Renamed timeoutSeconds to timeoutMilliseconds as s... (Tuesday, 25 April)
• [w3c/webauthn] 1fd6ae: repair fig 3 - fix #401 (Tuesday, 25 April)
• [w3c/webauthn] 91fe1a: Merged master (Tuesday, 25 April)
• [w3c/webauthn] 37e612: Remove one line (Monday, 24 April)
• [w3c/webauthn] a1e74d: Update according to comment (Monday, 24 April)
• [w3c/webauthn] 93448b: Built by Travis-CI: 55cd330c436202a92c575d4b28db11... (Monday, 24 April)
• [w3c/webauthn] 6f2f11: Renamed timeoutSeconds to timeoutMilliseconds as s... (Monday, 24 April)
• [w3c/webauthn] 09c1ea: Built by Travis-CI: 333b8aad131f7f0d437e304eecfa12... (Sunday, 23 April)
• [w3c/webauthn] 333b8a: Fix issue #418 - What extension data is in Authent... (Sunday, 23 April)
• [w3c/webauthn] 8eb7b5: Separated proposed changes to extension semantics ... (Friday, 21 April)
• [w3c/webauthn] a3bae0: Updated PR based on Jeffrey comment (Friday, 21 April)
• [w3c/webauthn] 371886: Built by Travis-CI: 8eb7b5c7323312a2f49bab4aec04c0... (Friday, 21 April)
• [w3c/webauthn] 8eb7b5: Separated proposed changes to extension semantics ... (Friday, 21 April)
• [w3c/webauthn] e5f424: Remove unnecessary blank (Wednesday, 19 April)
• [w3c/webauthn] fba8ac: Remove unnecessary whitespace (Wednesday, 19 April)
• [w3c/webauthn] 0154cb: replaced DAA root key by daaKeyId. Added proper r... (Wednesday, 19 April)
• [w3c/webauthn] 2cccb3: Built by Travis-CI: 66c6224cbb287bd6cc4236c2e004dd... (Wednesday, 19 April)
• [w3c/webauthn] 3b5138: Tiny typo in 'ScopedCredentialDesciptor'. (Wednesday, 19 April)
• [w3c/webauthn] d2ea8e: Merge PR 384 and remove RK bit (Wednesday, 19 April)
• [w3c/webauthn] (Monday, 17 April)
• [w3c/webauthn] (Monday, 17 April)
• [w3c/webauthn] e6608d: Built by Travis-CI: 275a5522be02b102a895964ee99692... (Friday, 14 April)
• [w3c/webauthn] 5a0a88: Built by Travis-CI: c22e2ab8350c8ed2b94b9d158e2c0e... (Friday, 14 April)
• [w3c/webauthn] 4fad3e: Convert `makeCredential()`'s parameters into a dic... (Friday, 14 April)
• [w3c/webauthn] a9da99: Move `getAssertion()`'s `challenge` into `Assertio... (Friday, 14 April)
• [w3c/webauthn] 2d10a1: Introduce authenticator response interfaces. (Friday, 14 April)
• [w3c/webauthn] 565096: corrected signing and verification procedure for U... (Thursday, 6 April)
• [w3c/webauthn] 3311f8: corrected image (DAA--> ECDAA etc.) (Thursday, 6 April)
• [w3c/webauthn] 22913b: first draft of uaf attestation statement format (Tuesday, 4 April)
• [w3c/webauthn] b1bd6c: first draft of new credential type ScopedCred_FIDO... (Tuesday, 4 April)

Hodges, Jeff

• wrt PR #397 and #398 (Friday, 14 April)
• Re: Unknowns of the WebAuthn + CredMan merge (Friday, 14 April)
• Re: PR #384 CredMan Integration (Wednesday, 12 April)
• Re: PR #384 CredMan Integration (Tuesday, 11 April)
• Re: PR #384 CredMan Integration (Tuesday, 11 April)
• Re: PR #384 CredMan Integration (Tuesday, 11 April)
• Re: PR #384 CredMan Integration (Monday, 10 April)
• Re: Dirk's presentation of the relationship between CredMan and WebAuthn (Saturday, 8 April)
• Re: Dirk's presentation of the relationship between CredMan and WebAuthn (Saturday, 8 April)
• Re: Splitting "Credential Management"? (Thursday, 6 April)

Ian Kilpatrick via GitHub

• Re: [webauthn] Too generic names? (Wednesday, 5 April)

J.C. Jones

• Re: PR #384 CredMan Integration (Tuesday, 11 April)

J.C. Jones via GitHub

• Re: [webauthn] Introduce authenticator response interfaces. (Friday, 14 April)
• Re: [webauthn] Introduce authenticator response interfaces. (Wednesday, 12 April)
• Closed: [webauthn] Add explanation of why the account argument is useful (Wednesday, 5 April)
• Re: [webauthn] Add explanation of why the account argument is useful (Wednesday, 5 April)

Jakob Ehrensvärd

• Re: [webauthn] Why was PR #409 (UV bit) merged? (Tuesday, 25 April)
• Re: [webauthn] Add Test of User Identity (TUI) bit to authenticator data (Thursday, 20 April)

Jeffrey Yasskin

• Re: Unknowns of the WebAuthn + CredMan merge (Friday, 14 April)
• Benefits of exposing webauthn through navigator.credentials (Wednesday, 5 April)

Jeffrey Yasskin via GitHub

• Re: [webauthn] Client arguments should be specified with "partial dictionary AuthenticationExtensions" (Saturday, 29 April)
• Closed: [webauthn] Client arguments should be specified with "partial dictionary AuthenticationExtensions" (Saturday, 29 April)
• Re: [webauthn] address empty allowlist in 'use existing cred' alg, fixes #387 (Friday, 28 April)
• Re: [webauthn] leverage "credential source" term from credential management spec (Thursday, 27 April)
• Re: [webauthn] Define extension client processing more carefully. (Friday, 21 April)
• Closed: [webauthn] Define extension client processing more carefully. (Friday, 21 April)
• [webauthn] What extension data is in AuthenticatorAssertionResponse.authenticatorData? (Friday, 21 April)
• Re: [webauthn] Client arguments should be specified with "partial dictionary AuthenticationExtensions" (Friday, 21 April)
• Re: [webauthn] What does store() do? (Thursday, 20 April)
• Re: [webauthn] RawId vs Id is confusing (Thursday, 20 April)
• Re: [webauthn] Add Test of User Identity (TUI) bit to authenticator data (Thursday, 20 April)
• Re: [webauthn] Add Test of User Identity (TUI) bit to authenticator data (Thursday, 20 April)
• [webauthn] Replace Authenticator Model with CTAP (Wednesday, 19 April)
• [webauthn] Rename ScopedCredential to PublicKeyCredential (Friday, 14 April)
• Re: [webauthn] explain challenge's security importance and use in both registration and authentication operations (Friday, 14 April)
• Re: [webauthn] explain challenge's security importance and use in both registration and authentication operations (Friday, 14 April)
• Re: [webauthn] [PR 384] Does requireUserMediation() make sense after merge (Friday, 14 April)
• Re: [webauthn] Consider empty allowLists (Friday, 14 April)
• [webauthn] Filter makeCredential() by acceptable trust anchors (Wednesday, 12 April)
• Re: [webauthn] Fetch intergration for WebAuthn API (Wednesday, 5 April)
• Re: [webauthn] restrict WebAuthentication API to only top level browsing context (Wednesday, 5 April)
• Re: [webauthn] Fetch intergration for WebAuthn API (Wednesday, 5 April)

kpaulh via GitHub

• Re: [webauthn] Some editing cleanup following cred man merge (Thursday, 20 April)
• [webauthn] Some editing cleanup following cred man merge (Thursday, 20 April)
• Re: [webauthn] authenticatorCancel seems like it can cancel too much (Thursday, 6 April)
• Re: [webauthn] Should the WebAuth API have a cancel() method? (Thursday, 6 April)

Mike Jones

• RE: Review PR 378, 428, 429 (Saturday, 29 April)
• RE: PR #217 factored into 8 PRs, each with defined purpose and scope (Thursday, 27 April)
• PR #217 factored into 8 PRs, each with defined purpose and scope (Thursday, 27 April)
• Extension language significantly clarified (Wednesday, 19 April)
• FW: Intended Status for <draft-hodges-webauthn-registries-00.txt> changed to Informational (Sunday, 2 April)

Mike Jones via GitHub

• [webauthn] new commits pushed by selfissued (Saturday, 29 April)
• Re: [webauthn] address empty allowlist in 'use existing cred' alg, fixes #387 (Saturday, 29 April)
• Re: [webauthn] Throw NotFoundError when no authenticator is available (Saturday, 29 April)
• Re: [webauthn] attObj and Figure 3 [[#fig-attStructs]] do not agree (Saturday, 29 April)
• Re: [webauthn] 3rd approach: Add authenticator selection dictionary to create with attachment (Saturday, 29 April)
• Re: [webauthn] address empty allowlist in 'use existing cred' alg, fixes #387 (Friday, 28 April)
• [webauthn] new commits pushed by selfissued (Thursday, 27 April)
• Re: [webauthn] Add a link to web-platform-tests to the top of the spec (Wednesday, 26 April)
• Re: [webauthn] Send authenticator extension inputs to authenticators and send client extension outputs to RPs (Wednesday, 26 April)
• Re: [webauthn] Account information merge (Tuesday, 25 April)
• Re: [webauthn] Account information merge (Monday, 24 April)
• Re: [webauthn] Account information merge (Monday, 24 April)
• Re: [webauthn] Add User Verification (UV) bit to authenticator data (Monday, 24 April)
• Re: [webauthn] Throw NotFoundError when no authenticator is available (Sunday, 23 April)
• Re: [webauthn] Add User Verification (UV) bit to authenticator data (Sunday, 23 April)
• Re: [webauthn] UVM Extension Editorial Change (Friday, 21 April)
• Re: [webauthn] What extension data is in AuthenticatorAssertionResponse.authenticatorData? (Friday, 21 April)
• [webauthn] Correct uses of "JSON string" versus "DOMString" and other string terminology usage (Friday, 21 April)
• Re: [webauthn] UVM Extension Editorial Change (Friday, 21 April)
• Re: [webauthn] Define extension client processing more carefully. (Friday, 21 April)
• Re: [webauthn] Client arguments should be specified with "partial dictionary AuthenticationExtensions" (Friday, 21 April)
• Re: [webauthn] "Authenticator argument" vs. "authenticator data value" in Extensions section (Friday, 21 April)
• Closed: [webauthn] "Authenticator argument" vs. "authenticator data value" in Extensions section (Friday, 21 April)
• Closed: [webauthn] refine extension terminology (Friday, 21 April)
• Re: [webauthn] refine extension terminology (Friday, 21 April)
• Re: [webauthn] Processing model for extensions is very underdefined (Friday, 21 April)
• Closed: [webauthn] Processing model for extensions is very underdefined (Friday, 21 April)
• Closed: [webauthn] UVM should be "method" rather than "mode" ? (Friday, 21 April)
• Re: [webauthn] UVM should be "method" rather than "mode" ? (Friday, 21 April)
• Re: [webauthn] UVM should be "method" rather than "mode" ? (Thursday, 20 April)
• Re: [webauthn] Separated proposed changes to extension semantics from PR #386 and use TypeError, per @jyasskin (Wednesday, 19 April)
• Re: [webauthn] Processing model for extensions is very underdefined (Friday, 7 April)
• Re: [webauthn] normalize RFC2119 language (Friday, 7 April)
• Re: [webauthn] Various attributes of ScopedCredentialInfo should probably be [SameObject] (Wednesday, 5 April)
• Re: [webauthn] authenticatorCancel seems like it can cancel too much (Wednesday, 5 April)
• Re: [webauthn] AssertionOptions and ScopedCredentialOptions could both inherit from a dictionary which has their shared members (Wednesday, 5 April)
• Re: [webauthn] _rpId_ generation allows more relaxation of same-origin restrictions than document.domain does (Wednesday, 5 April)
• Re: [webauthn] Is _rpId_ supposed to look like an origin serialization, or like a hostname? (Wednesday, 5 April)
• Re: [webauthn] Setting _rpId_ to _callerOrigin_ doesn't make sense (Wednesday, 5 April)
• Re: [webauthn] Should the "authentication" attribute on Navigator be [SameObject]? (Wednesday, 5 April)
• Re: [webauthn] Consider using USVString instead of DOMString sometimes (Wednesday, 5 April)
• Re: [webauthn] detail-level issues in signature format, attestation format(s), attestation statement (Wednesday, 5 April)
• Re: [webauthn] Internationalization self review (Wednesday, 5 April)
• Re: [webauthn] DOMString[] should be FrozenArray<DOMString> (Wednesday, 5 April)
• Re: [webauthn] TAG review feedback: Align Credential interface with Credential Management? (Wednesday, 5 April)
• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Wednesday, 5 April)
• Re: [webauthn] clarify normality of authenticator model - is it actually authenticator API ? (Wednesday, 5 April)
• Re: [webauthn] update extensions framework to include interfacing with user agent permissions framework (Wednesday, 5 April)
• Re: [webauthn] Consider using USVString instead of DOMString sometimes (Wednesday, 5 April)
• Re: [webauthn] DOMString[] should be FrozenArray<DOMString> (Wednesday, 5 April)
• Re: [webauthn] Various attributes of ScopedCredentialInfo should probably be [SameObject] (Wednesday, 5 April)
• Re: [webauthn] What ensures any semblance of interop for WebAuthnExtensions? (Wednesday, 5 April)
• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Wednesday, 5 April)
• Re: [webauthn] Add isPlatformAuthenticatorReady function to the API surface (Wednesday, 5 April)
• Re: [webauthn] Enable RP to choose authenticators based on key storage capability (Wednesday, 5 April)
• Re: [webauthn] Throw NotFoundError when no authenticator is available (Wednesday, 5 April)
• Re: [webauthn] Add gesture verification parameter to option in both makeC and getA (Wednesday, 5 April)
• Re: [webauthn] Protect against TLS MiTM by including TLS cert chain in signature (Wednesday, 5 April)
• Re: [webauthn] Consider empty allowLists (Wednesday, 5 April)
• Re: [webauthn] makeCredential should be more precise than NotAllowedError in its last step (Wednesday, 5 April)
• Re: [webauthn] restrict WebAuthentication API to only top level browsing context (Wednesday, 5 April)
• Re: [webauthn] follow Bluetooth and NFC brand usage guidance (Wednesday, 5 April)
• Re: [webauthn] Specify the set of hash algorithms UAs can select between. (Wednesday, 5 April)
• Re: [webauthn] define what to do if both normalizedAlgorithm and cryptoParameters are empty (Wednesday, 5 April)
• Re: [webauthn] Eliminate duplicate terminology (Wednesday, 5 April)
• Re: [webauthn] Fetch intergration for WebAuthn API (Wednesday, 5 April)
• Re: [webauthn] Track rename issues to maintain consistency (Wednesday, 5 April)
• Re: [webauthn] References to "algorithm" and "alg" should be same string (Wednesday, 5 April)
• Re: [webauthn] Add getAuthenticatorInfo to the Authenticator Model section (Wednesday, 5 April)
• Re: [webauthn] Client arguments should be specified with "partial dictionary AuthenticationExtensions" (Wednesday, 5 April)
• Re: [webauthn] Expose standard authenticator fields in JS objects, vs. binary (Wednesday, 5 April)
• Re: [webauthn] Add cloud transport option to transport hint (Wednesday, 5 April)
• Re: [webauthn] Too generic names? (Wednesday, 5 April)
• Re: [webauthn] "ScopedCred" enum should be "scoped-cred" (Wednesday, 5 April)
• Re: [webauthn] excludeList and allowList should be excludeCredentials and allowCredentials (Wednesday, 5 April)
• Re: [webauthn] hashAlg -> hashAlgorithm? (Wednesday, 5 April)
• Re: [webauthn] "rp" isn't a widely enough known acronym?, should be relyingParty instead? (Wednesday, 5 April)
• Closed: [webauthn] "rp" isn't a widely enough known acronym?, should be relyingParty instead? (Wednesday, 5 April)
• Re: [webauthn] tokenBinding member of ClientData should be tokenBindingID (Wednesday, 5 April)
• Re: [webauthn] Define what happens when the Document loses focus (Wednesday, 5 April)
• Re: [webauthn] "NotAllowedError" is in WebIDL editors draft but not in WebIDL Level 1 (Wednesday, 5 April)
• Re: [webauthn] Throw "NotFoundError" when internal authenticator is not available or not found (Wednesday, 5 April)
• Re: [webauthn] Update attestation format identifiers in registry to match spec (Wednesday, 5 April)
• Closed: [webauthn] Update attestation format identifiers in registry to match spec (Wednesday, 5 April)
• Re: [webauthn] Why are various predefined extensions defined as extensions, and not just parts of the spec? (Wednesday, 5 April)
• Closed: [webauthn] Why are various predefined extensions defined as extensions, and not just parts of the spec? (Wednesday, 5 April)
• Re: [webauthn] Why is the only value of ScopedCredentialType "ScopedCred" as opposed to "ScopedCredential"? (Wednesday, 5 April)
• Re: [webauthn] authenticatorCancel seems like it can cancel too much (Wednesday, 5 April)
• Re: [webauthn] AssertionOptions and ScopedCredentialOptions could both inherit from a dictionary which has their shared members (Wednesday, 5 April)
• Re: [webauthn] Setting _rpId_ to _callerOrigin_ doesn't make sense (Wednesday, 5 April)
• Re: [webauthn] "authentication" attribute on Navigator should be [SecureContext] (Wednesday, 5 April)
• Re: [webauthn] Should the "authentication" attribute on Navigator be [SameObject]? (Wednesday, 5 April)
• Re: [webauthn] detail-level issues in signature format, attestation format(s), attestation statement (Wednesday, 5 April)
• Re: [webauthn] Clarify what is a proprietary attestation format and whether it should be designated by a prefix (Tuesday, 4 April)
• Closed: [webauthn] Clarify what is a proprietary attestation format and whether it should be designated by a prefix (Tuesday, 4 April)
• Re: [webauthn] Add explanation of why the account argument is useful (Tuesday, 4 April)
• Re: [webauthn] Drop UAF references in favor of better explanation (Tuesday, 4 April)
• Re: [webauthn] Internationalization self review (Tuesday, 4 April)
• Re: [webauthn] do not totally lose the term "WebAuthn Relying Party" (Tuesday, 4 April)
• Re: [webauthn] clarify normality of authenticator model - is it actually authenticator API ? (Tuesday, 4 April)
• Re: [webauthn] DOMString[] should be FrozenArray<DOMString> (Tuesday, 4 April)
• Re: [webauthn] Clarify how a user can authenticate from multiple devices (Tuesday, 4 April)
• Re: [webauthn] refine extension terminology (Tuesday, 4 April)
• Re: [webauthn] Spec should not mandate behavior of server (Tuesday, 4 April)
• Re: [webauthn] web-api: is further language needed describing AppID (aka rpId) usage ? (Tuesday, 4 April)
• Re: [webauthn] TAG review feedback: Align Credential interface with Credential Management? (Sunday, 2 April)
• Re: [webauthn] Credential CBOR (Sunday, 2 April)
• Re: [webauthn] Processing model for extensions is very underdefined (Sunday, 2 April)

Mike West

• Re: PR #384 CredMan Integration (Tuesday, 11 April)
• Re: Benefits of exposing webauthn through navigator.credentials (Tuesday, 11 April)
• Re: Benefits of exposing webauthn through navigator.credentials (Monday, 10 April)

Mike West via GitHub

• Re: [webauthn] Rename ScopedCredential to PublicKeyCredential (Friday, 28 April)
• Re: [webauthn] Account information merge (Monday, 24 April)
• Re: [webauthn] Account information merge (Monday, 24 April)
• Re: [webauthn] rpID seems to have changed meaning a bit (Monday, 24 April)
• Re: [webauthn] RawId vs Id is confusing (Monday, 24 April)
• Re: [webauthn] "authentication" attribute on Navigator should be [SecureContext] (Wednesday, 19 April)
• Re: [webauthn] Should the "authentication" attribute on Navigator be [SameObject]? (Wednesday, 19 April)
• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Wednesday, 19 April)
• Re: [webauthn] explain challenge's security importance and use in both registration and authentication operations (Wednesday, 19 April)
• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Wednesday, 19 April)
• Re: [webauthn] explain challenge's security importance and use in both registration and authentication operations (Tuesday, 18 April)
• Re: [webauthn] explain challenge's security importance and use in both registration and authentication operations (Saturday, 15 April)
• Re: [webauthn] Convert `makeCredential()`'s parameters into a dictionary. (Friday, 14 April)
• Re: [webauthn] Move `getAssertion()`'s `challenge` into `AssertionOptions` (Friday, 14 April)
• Re: [webauthn] Introduce authenticator response interfaces. (Friday, 14 April)
• Re: [webauthn] Move `getAssertion()`'s `challenge` into `AssertionOptions` (Wednesday, 12 April)
• Re: [webauthn] Move `getAssertion()`'s `challenge` into `AssertionOptions` (Wednesday, 12 April)
• Re: [webauthn] Add "willMakeCredentialWorkWithTheseConstraints()" method to the API (Wednesday, 12 April)
• Re: [webauthn] Convert `makeCredential()`'s parameters into a dictionary. (Wednesday, 12 April)
• Re: [webauthn] Move `getAssertion()`'s `challenge` into `AssertionOptions` (Wednesday, 12 April)
• Re: [webauthn] Introduce authenticator response interfaces. (Wednesday, 12 April)
• Re: [webauthn] Add "willMakeCredentialWorkWithTheseConstraints()" method to the API (Tuesday, 11 April)
• Re: [webauthn] Strawman of an integration between WebAuthn and Credential Management. (Monday, 10 April)
• Re: [webauthn] Fetch intergration for WebAuthn API (Wednesday, 5 April)
• Re: [webauthn] restrict WebAuthentication API to only top level browsing context (Wednesday, 5 April)

Rolf Lindemann via GitHub

• [webauthn] new commits pushed by rlin1 (Thursday, 6 April)
• [webauthn] new commits pushed by rlin1 (Thursday, 6 April)
• Re: [webauthn] detail-level issues in signature format, attestation format(s), attestation statement (Wednesday, 5 April)
• Re: [webauthn] Protect against TLS MiTM by including TLS cert chain in signature (Wednesday, 5 April)
• [webauthn] new commits pushed by rlin1 (Tuesday, 4 April)
• [webauthn] new commits pushed by rlin1 (Tuesday, 4 April)
• [webauthn] U2F Attestation only lists Basic Attestation as supported (Monday, 3 April)

Sam Srinivas via GitHub

• Re: [webauthn] Protect against TLS MiTM by including TLS cert chain in signature (Wednesday, 5 April)

sjparkRaon via GitHub

• [webauthn] How to unmarshal in TPM Structure. (Thursday, 13 April)
• Re: [webauthn] daaKey format? (ECPointToB -> ECPoint2ToB) (Thursday, 13 April)

Vijay Bharadwaj

• RE: PR #384 CredMan Integration (Tuesday, 11 April)
• RE: PR #384 CredMan Integration (Tuesday, 11 April)
• RE: Benefits of exposing webauthn through navigator.credentials (Monday, 10 April)
• Re: 04/05/2017 W3C Web Authentication WG Meeting Agenda (Wednesday, 5 April)

Vijay Bharadwaj via GitHub

• Re: [webauthn] Throw NotFoundError when no authenticator is available (Wednesday, 26 April)
• Re: [webauthn] Throw NotFoundError when no authenticator is available (Wednesday, 26 April)
• Re: [webauthn] explain challenge's security importance and use in both registration and authentication operations (Wednesday, 19 April)
• [webauthn] new commits pushed by vijaybh (Monday, 17 April)
• Re: [webauthn] How to unmarshal in TPM Structure. (Friday, 14 April)
• Closed: [webauthn] How to unmarshal in TPM Structure. (Friday, 14 April)
• Re: [webauthn] attObj and Figure 3 [[#fig-attStructs]] do not agree (Friday, 14 April)
• Re: [webauthn] Consider empty allowLists (Friday, 14 April)
• Re: [webauthn] Add "willMakeCredentialWorkWithTheseConstraints()" method to the API (Wednesday, 12 April)
• Re: [webauthn] Add "willMakeCredentialWorkWithTheseConstraints()" method to the API (Tuesday, 11 April)

WebAuthnBot via GitHub

• [webauthn] new commits pushed by WebAuthnBot (Saturday, 29 April)
• [webauthn] new commits pushed by WebAuthnBot (Saturday, 29 April)
• [webauthn] new commits pushed by WebAuthnBot (Friday, 28 April)
• [webauthn] new commits pushed by WebAuthnBot (Thursday, 27 April)
• [webauthn] new commits pushed by WebAuthnBot (Monday, 24 April)
• [webauthn] new commits pushed by WebAuthnBot (Sunday, 23 April)
• [webauthn] new commits pushed by WebAuthnBot (Friday, 21 April)
• [webauthn] new commits pushed by WebAuthnBot (Wednesday, 19 April)
• [webauthn] new commits pushed by WebAuthnBot (Friday, 14 April)
• [webauthn] new commits pushed by WebAuthnBot (Friday, 14 April)

Wendy Seltzer

• Minutes of past meetings (Friday, 14 April)

Last message date: Sunday, 30 April 2017 00:01:47 UTC