public-webauthn@w3.org from September 2017 by date

Saturday, 30 September 2017

• Re: [webauthn] fixup algs contd 3 =JeffH via GitHub
• [w3c/webauthn] a1b998: fix indents make BS happy, add some periods GitHub
• [webauthn] new commits pushed by equalsJeffH =JeffH via GitHub
• Re: [webauthn] Make packed attestation format Privacy CA-friendly Ki-Eun Shin via GitHub

Friday, 29 September 2017

• Re: [webauthn] Make packed attestation format Privacy CA-friendly Adam Langley via GitHub
• Re: [webauthn] fixup algs contd 3 =JeffH via GitHub
• Re: [webauthn] PR#498 fixup algs contd 3 Hodges, Jeff
• [webauthn] Need to fix android key attestation verification procedure Ki-Eun Shin via GitHub
• [w3c/webauthn] 14c273: fix proper subset tweak (#542) GitHub
• [webauthn] new commits pushed by equalsJeffH =JeffH via GitHub
• @@EDITOR-ANCHOR in index.bs? =JeffH
• Re: [webauthn] Make packed attestation format Privacy CA-friendly Ki-Eun Shin via GitHub

Thursday, 28 September 2017

• Re: [webauthn] Plumb User ID through Christiaan Brand via GitHub
• [w3c/webauthn] 5e5060: Built by Travis-CI: 3ee8ed586c2ce62f7a4180cb9dcf0d... GitHub
• [webauthn] new commits pushed by WebAuthnBot WebAuthnBot via GitHub
• [w3c/webauthn] 0141d9: Corrected inaccuracy in authenticator extension pr... GitHub
• [webauthn] new commits pushed by christiaanbrand Christiaan Brand via GitHub
• Closed: [webauthn] "Authenticator extension processing" is likely wrong Christiaan Brand via GitHub
• [webauthn] Change user.id examples to binary encoding. Christiaan Brand via GitHub
• [w3c/webauthn] 42a7e6: Built by Travis-CI: d96d7668a53bfc463968bedc9d9b95... GitHub
• [webauthn] new commits pushed by WebAuthnBot WebAuthnBot via GitHub
• [w3c/webauthn] 4aa72b: Fix syntax errors in JavaScript examples. GitHub
• [webauthn] new commits pushed by christiaanbrand Christiaan Brand via GitHub
• Re: [webauthn] Restore identifier alignment with CTAP and WD-06 Christiaan Brand via GitHub
• [w3c/webauthn] 27d71f: Built by Travis-CI: 6589a1013cd776da57d704eb8508fc... GitHub
• [webauthn] new commits pushed by WebAuthnBot WebAuthnBot via GitHub
• [w3c/webauthn] d9d171: Built by Travis-CI: 96b9a982b235144816abaaa6517d36... GitHub
• [w3c/webauthn] 6e45cc: Clarify Safetynet attestation return value GitHub
• [webauthn] new commits pushed by WebAuthnBot WebAuthnBot via GitHub
• [webauthn] new commits pushed by christiaanbrand Christiaan Brand via GitHub
• Closed: [webauthn] Safetynet attestation does not return byte array as a response. Christiaan Brand via GitHub
• [w3c/webauthn] 5502d4: Clarifying signing procedure for U2F attestation GitHub
• Closed: [webauthn] Make U2F Attestation Format "sig" more precise Christiaan Brand via GitHub
• [webauthn] new commits pushed by christiaanbrand Christiaan Brand via GitHub
• Re: [webauthn] Sign counter alg 507 alternative: optional sig counter Mike Jones via GitHub
• Re: [webauthn] Sign counter alg 507 alternative: optional sig counter Mike Jones via GitHub
• Re: [webauthn] "Authenticator extension processing" is likely wrong Mike Jones via GitHub
• Re: [webauthn] Key types and algorithms are confusing Mike Jones via GitHub
• [w3c/webauthn] a7dd80: Built by Travis-CI: 26552c41d086f46be877018dc2c8b0... GitHub
• [webauthn] new commits pushed by WebAuthnBot WebAuthnBot via GitHub
• [w3c/webauthn] 467f31: Built by Travis-CI: 2ec526743c1fe42ea602fa31d47eed... GitHub
• [w3c/webauthn] 26552c: Make user.id a byte array (#586) GitHub
• [webauthn] new commits pushed by selfissued Mike Jones via GitHub
• [webauthn] new commits pushed by WebAuthnBot WebAuthnBot via GitHub
• [w3c/webauthn] 2ec526: Clean up COSEAlgorithmIdentifier loose ends (#580) GitHub
• Closed: [webauthn] Where are rsaAlgName and eccAlgName defined? Mike Jones via GitHub
• [webauthn] new commits pushed by selfissued Mike Jones via GitHub

Wednesday, 27 September 2017

• Updated Web Platform Tests Adam Powers
• Re: [webauthn] Fix syntax errors in JavaScript examples. James Barclay via GitHub
• Re: [webauthn] include public key in result from create() Angelo Liao via GitHub
• [webauthn] Examples should include non-ASCII [editorial] r12a via GitHub
• [webauthn] Display name content rules? r12a via GitHub
• [webauthn] Incorrect feedback link in 20160531 WD r12a via GitHub
• [webauthn] Description of attestation signature generation for ECDAA needs to be fixed. Ki-Eun Shin via GitHub
• [webauthn] Need to remove the term "authentication key" in self attestation description Ki-Eun Shin via GitHub
• [webauthn] User Verification Method (uvm) extension incorrectly mentions user verification *index* James Manger via GitHub
• [webauthn] Extension identifiers in examples are inconsistent with registered identifiers James Manger via GitHub
• PR #586 review submitted =JeffH
• Re: [webauthn] Nothing required in PublicKeyCredentialEntity Adam Powers via GitHub
• Re: [webauthn] Nothing required in PublicKeyCredentialEntity Adam Powers via GitHub
• [webauthn] Nothing required in PublicKeyCredentialEntity Adam Powers via GitHub
• Re: [webauthn] fixup algs contd 3 =JeffH via GitHub
• [webauthn] address needs of various webauthn spec audiences =JeffH via GitHub
• Re: [webauthn] include public key in result from create() balfanz via GitHub

Tuesday, 26 September 2017

• [webauthn] Make packed attestation format Privacy CA-friendly balfanz via GitHub
• Re: [webauthn] Clean up COSEAlgorithmIdentifier loose ends Mike Jones via GitHub
• RE: WebAuthn Spec Status Angelo Liao
• Re: WebAuthn Spec Status Denis Pinkas
• [webauthn] No way to select an intended authenticator during authentication with attachment info Ki-Eun Shin via GitHub
• please review credman PR#100 and webauthn PR#498.. (fixup algs contd 3) =JeffH

Monday, 25 September 2017

• Re: [webauthn] Where are rsaAlgName and eccAlgName defined? Mike Jones via GitHub
• Re: WebAuthn Spec Status J.C. Jones
• Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague Emil Lundberg via GitHub
• Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague Johan Verrept via GitHub
• Re: [webauthn] Where are rsaAlgName and eccAlgName defined? Rolf Lindemann via GitHub
• Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague Christiaan Brand via GitHub
• Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague Ki-Eun Shin via GitHub
• Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague Emil Lundberg via GitHub
• WebAuthn Spec Status Alexei Czeskis
• Re: [webauthn] Clean up COSEAlgorithmIdentifier loose ends Akshay Kumar via GitHub
• Re: [webauthn] Where are rsaAlgName and eccAlgName defined? Akshay Kumar via GitHub
• Re: [webauthn] Where are rsaAlgName and eccAlgName defined? Mike Jones via GitHub
• Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague Ki-Eun Shin via GitHub

Sunday, 24 September 2017

• RE: [webauthn] Plumb User ID through Johan Verrept
• Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague Emil Lundberg via GitHub
• Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague Johan Verrept via GitHub

Saturday, 23 September 2017

• Re: [webauthn] user id should be returned in get() Emil Lundberg via GitHub
• Re: [webauthn] Plumb User ID through Emil Lundberg via GitHub

Friday, 22 September 2017

• Re: [webauthn] Plumb User ID through Anthony Nadalin via GitHub
• Re: [webauthn] Plumb User ID through Christiaan Brand via GitHub
• Re: [webauthn] Plumb User ID through Christiaan Brand via GitHub
• [w3c/webauthn] 757240: Built by Travis-CI: 67e922c011aeb2668fd7adfaf75d7f... GitHub
• [webauthn] new commits pushed by WebAuthnBot WebAuthnBot via GitHub
• [w3c/webauthn] 67e922: Clarify excludeCredentialDescriptorList (#573) GitHub
• [webauthn] new commits pushed by AngeloKai Angelo Liao via GitHub
• Closed: [webauthn] authenticatorMakeCredential has an excludeCredentialDescriptorList parameter, but doesn't do anything with it Angelo Liao via GitHub
• Re: [webauthn] Clarify excludeCredentialDescriptorList Angelo Liao via GitHub
• Re: [webauthn] Plumb User ID through Emil Lundberg via GitHub
• Re: [webauthn] Sign counter alg 507 Akshay Kumar via GitHub
• Re: [webauthn] Plumb User ID through John Bradley
• Re: [webauthn] Plumb User ID through Akshay Kumar via GitHub
• Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague John Bradley via GitHub
• Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague Johan Verrept via GitHub
• Closed: [webauthn] Credential ID uniqueness expectations are inconsistent/vague Emil Lundberg via GitHub
• Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague Emil Lundberg via GitHub
• Re: [webauthn] user id should be returned in get() Emil Lundberg via GitHub
• Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague Johan Verrept via GitHub
• Re: [webauthn] Plumb User ID through Emil Lundberg via GitHub
• Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague Akshay Kumar via GitHub
• Re: [webauthn] Credential ID uniqueness expectations are inconsistent/vague Emil Lundberg via GitHub
• Re: [webauthn] Plumb User ID through Akshay Kumar via GitHub
• Re: [webauthn] Plumb User ID through Akshay Kumar via GitHub
• Re: [webauthn] Plumb User ID through Emil Lundberg via GitHub
• [webauthn] Credential ID uniqueness expectations are inconsistent/vague Emil Lundberg via GitHub
• Re: [webauthn] CDDL for attStmtType is confusing Emil Lundberg via GitHub

Thursday, 21 September 2017

• Re: [webauthn] Plumb User ID through Jakob Ehrensvärd
• Re: [webauthn] Plumb User ID through Alexei Czeskis via GitHub
• Re: [webauthn] Plumb User ID through Johan Verrept via GitHub
• Re: [webauthn] Privacy Considerations should describe risks of storing userID/displayName in "second-factor" authenticators John Bradley via GitHub
• Re: [webauthn] Fix Android attestation Ki-Eun Shin via GitHub

Wednesday, 20 September 2017

• [w3c/webauthn] 8e8219: Built by Travis-CI: f37cfc5dfd074832ab61ed299d1ee7... GitHub
• [webauthn] new commits pushed by WebAuthnBot WebAuthnBot via GitHub
• [webauthn] Privacy Considerations should describe risks of storing userID/displayName in "second-factor" authenticators Jeffrey Yasskin via GitHub
• Re: [webauthn] Plumb User ID through Christiaan Brand via GitHub
• Re: [webauthn] Plumb User ID through Jeffrey Yasskin via GitHub
• Re: [webauthn] Plumb User ID through Christiaan Brand via GitHub
• [w3c/webauthn] f37cfc: Address security and privacy issues witht the icon... GitHub
• Re: [webauthn] Address security and privacy issues witht the iconURL =JeffH via GitHub
• [webauthn] new commits pushed by AngeloKai Angelo Liao via GitHub
• Re: [webauthn] fixup algs contd 3 Rolf Lindemann via GitHub
• Re: [webauthn] Not clear what's executed in parallel in Section 4.1.3, Step 24.3 =JeffH via GitHub
• Re: [webauthn] include public key in result from create() Emil Lundberg via GitHub
• Re: [webauthn] keyType: "public-key" is superfluous Rolf Lindemann via GitHub

Tuesday, 19 September 2017

• [webauthn] CDDL for attStmtType is confusing J.C. Jones via GitHub
• Re: [webauthn] include public key in result from create() Akshay Kumar via GitHub
• Re: [webauthn] Consider dropping requirement for TUP on create() Akshay Kumar via GitHub
• 09/20/2017 W3C Web Authentication WG Meeting Agenca John Fontana
• Re: [webauthn] Clarify excludeCredentialDescriptorList Akshay Kumar via GitHub
• Re: [webauthn] Where are rsaAlgName and eccAlgName defined? Akshay Kumar via GitHub
• Re: [webauthn] Not clear what to do with cross platform authenticators during make-an-assertion step Akshay Kumar via GitHub
• Re: [webauthn] restrict WebAuthentication API to only top level browsing context Alexei Czeskis via GitHub
• Re: [webauthn] include public key in result from create() balfanz via GitHub
• Re: [webauthn] preventSilentAccess() -- what effect does calling it have? balfanz via GitHub
• Re: [webauthn] How should the browser handle CredentialMediationRequirement for public key credentials? balfanz via GitHub
• Re: [webauthn] RP guidelines should allow RP to not check attestation Emil Lundberg via GitHub
• Re: [webauthn] RP guidelines should allow RP to not check attestation Emil Lundberg via GitHub
• Re: [webauthn] include public key in result from create() Jeffrey Yasskin via GitHub
• [webauthn] RP guidelines should allow RP to not check attestation Jeffrey Yasskin via GitHub
• Re: [webauthn] isPlatformAuthenticatorAvailable() timeout really 10 minutes? kpaulh via GitHub
• Re: [webauthn] Plumb User ID through Jeffrey Yasskin via GitHub
• Re: [webauthn] Plumb User ID through Emil Lundberg via GitHub
• Re: [webauthn] include public key in result from create() Emil Lundberg via GitHub

Monday, 18 September 2017

• [webauthn] isPlatformAuthenticatorAvailable() timeout really 10 minutes? christiaanbrand via GitHub
• [webauthn] Not clear what to do with cross platform authenticators during make-an-assertion step Alexei Czeskis via GitHub
• [w3c/webauthn] 5502d4: Clarifying signing procedure for U2F attestation GitHub
• [webauthn] new commits pushed by balfanz balfanz via GitHub
• Closed: [webauthn] should authenticatorExtensions really be a dictionary? balfanz via GitHub
• Re: [webauthn] .store() is confusing christiaanbrand via GitHub
• Re: [webauthn] include public key in result from create() balfanz via GitHub
• Re: [webauthn] Consider dropping requirement for TUP on create() christiaanbrand via GitHub
• Re: [webauthn] authenticatorMakeCredential has an excludeCredentialDescriptorList parameter, but doesn't do anything with it christiaanbrand via GitHub
• Re: [webauthn] authenticatorMakeCredential has an excludeCredentialDescriptorList parameter, but doesn't do anything with it Alexei Czeskis via GitHub
• Re: [webauthn] Plumb User ID through christiaanbrand via GitHub
• [webauthn] No description regarding representation of credential Id length Ki-Eun Shin via GitHub

Saturday, 16 September 2017

• Re: [webauthn] #registering-a-new-credential step 10 breakage Emil Lundberg via GitHub

Friday, 15 September 2017

• Re: [webauthn] user id should be returned in get() Anthony Nadalin via GitHub
• Re: [webauthn] include public key in result from create() Anthony Nadalin via GitHub
• Re: [webauthn] #registering-a-new-credential step 10 breakage Anthony Nadalin via GitHub
• Re: [webauthn] Consider dropping requirement for TUP on create() Anthony Nadalin via GitHub
• Closed: [webauthn] [PR 384] Does requireUserMediation() make sense after merge Angelo Liao via GitHub
• Re: [webauthn] [PR 384] Does requireUserMediation() make sense after merge Angelo Liao via GitHub
• Re: [webauthn] imageURL privacy Angelo Liao via GitHub
• Re: [webauthn] imageURL privacy Angelo Liao via GitHub
• Re: [webauthn] include public key in result from create() Angelo Liao via GitHub
• Re: [webauthn] user id should be returned in get() Angelo Liao via GitHub
• Re: [webauthn] Consider requiring canonical CBOR throughout Adam Langley via GitHub
• [webauthn] Add [Exposed] to all interfaces Anne van Kesteren via GitHub
• Re: [webauthn] user id should be returned in get() Emil Lundberg via GitHub
• Re: [webauthn] Plumb User ID through Emil Lundberg via GitHub
• Re: [webauthn] include public key in result from create() Emil Lundberg via GitHub
• Re: [webauthn] #registering-a-new-credential step 10 breakage Emil Lundberg via GitHub
• Re: [webauthn] imageURL privacy Axel Nennker via GitHub
• [webauthn] Where are rsaAlgName and eccAlgName defined? Emil Lundberg via GitHub
• [webauthn] authenticatorMakeCredential has an excludeCredentialDescriptorList parameter, but doesn't do anything with it balfanz via GitHub
• Re: [webauthn] keyType: "public-key" is superfluous balfanz via GitHub

Thursday, 14 September 2017

• Re: [webauthn] Consider dropping requirement for TUP on create() balfanz via GitHub
• [webauthn] How should the browser handle CredentialMediationRequirement for public key credentials? Alexei Czeskis via GitHub
• Re: [webauthn] Consider dropping requirement for TUP on create() Akshay Kumar via GitHub
• Re: [webauthn] Consider dropping requirement for TUP on create() Akshay Kumar via GitHub
• [webauthn] preventSilentAccess() -- what effect does calling it have? Alexei Czeskis via GitHub
• Re: [webauthn] Consider dropping requirement for TUP on create() balfanz via GitHub
• Re: [webauthn] Consider dropping requirement for TUP on create() Anthony Nadalin via GitHub
• Re: [webauthn] Consider dropping requirement for TUP on create() balfanz via GitHub
• Re: [webauthn] Consider dropping requirement for TUP on create() Anthony Nadalin via GitHub
• Re: [webauthn] Add credential type uaf Anthony Nadalin via GitHub
• Re: [webauthn] Address security and privacy issues witht the iconURL Alexei Czeskis via GitHub
• Re: [webauthn] imageURL privacy Alexei Czeskis via GitHub
• Re: [webauthn] Add uaf attestation format Alexei Czeskis via GitHub
• Re: [webauthn] Add credential type uaf Alexei Czeskis via GitHub
• [webauthn] Consider dropping requirement for TUP on create() balfanz via GitHub
• Re: [webauthn] keyType: "public-key" is superfluous Alexei Czeskis via GitHub
• Re: [webauthn] keyType: "public-key" is superfluous Rolf Lindemann via GitHub
• Re: [webauthn] keyType: "public-key" is superfluous Alexei Czeskis via GitHub
• Re: [webauthn] keyType: "public-key" is superfluous Alexei Czeskis via GitHub
• Re: [webauthn] Plumb User ID through Alexei Czeskis via GitHub
• Re: [webauthn] include public key in result from create() Alexei Czeskis via GitHub
• Closed: [webauthn] An issue about setAttestationChallenge() in "android-key" attestation statement Angelo Liao via GitHub
• Re: [webauthn] Safetynet attestation does not return byte array as a response. Angelo Liao via GitHub
• Re: [webauthn] include public key in result from create() Angelo Liao via GitHub
• Re: [webauthn] include public key in result from create() Angelo Liao via GitHub
• Re: [webauthn] include public key in result from create() Ibrahim Damlaj via GitHub

Wednesday, 13 September 2017

• Re: [webauthn] Include Constants for COSE Algorithm Numbers Anthony Nadalin via GitHub
• Re: [webauthn] new commits pushed by leshi Alexei Czeskis
• Re: [webauthn] Not clear what's executed in parallel in Section 4.1.3, Step 24.3 Anthony Nadalin via GitHub
• RE: [webauthn] new commits pushed by leshi Mike Jones
• RE: [webauthn] new commits pushed by leshi Mike Jones
• Re: [webauthn] new commits pushed by leshi Alexei Czeskis
• RE: [webauthn] new commits pushed by leshi Mike Jones
• Re: [webauthn] new commits pushed by leshi Alexei Czeskis
• RE: [webauthn] new commits pushed by leshi Mike Jones
• RE: [webauthn] new commits pushed by leshi Mike Jones
• Re: [webauthn] include public key in result from create() Anthony Nadalin via GitHub
• [w3c/webauthn] 1dce39: Built by Travis-CI: db1be8059b02cb8981fbe0229f6d1e... GitHub
• [webauthn] new commits pushed by WebAuthnBot WebAuthnBot via GitHub
• [w3c/webauthn] db1be8: Fix Android attestation (#546) GitHub
• [webauthn] new commits pushed by leshi Alexei Czeskis via GitHub
• [w3c/webauthn] f8943a: Built by Travis-CI: dcf793928221b1883f4c9ac4dd5264... GitHub
• [webauthn] new commits pushed by WebAuthnBot WebAuthnBot via GitHub
• [w3c/webauthn] dcf793: using descriptive names for authenticator selectio... GitHub
• [w3c/webauthn] 14adaa: Built by Travis-CI: eb401b78e218af43715e426ea1825f... GitHub
• [webauthn] new commits pushed by leshi Alexei Czeskis via GitHub
• Re: [webauthn] using descriptive names for authenticator selection criteria Alexei Czeskis via GitHub
• [webauthn] new commits pushed by WebAuthnBot WebAuthnBot via GitHub
• [w3c/webauthn] eb401b: Remove user agent getting user consent sentence (#... GitHub
• Closed: [webauthn] The description for creating a new credential has the browser prompting the user for consent Alexei Czeskis via GitHub
• [webauthn] new commits pushed by leshi Alexei Czeskis via GitHub
• Re: [webauthn] Address security and privacy issues witht the iconURL Anthony Nadalin via GitHub
• Re: [webauthn] Sign counter alg 507 Anthony Nadalin via GitHub
• [w3c/webauthn] 4a376b: removed signing procedure details and referred to ... GitHub
• [webauthn] new commits pushed by rlin1 Rolf Lindemann via GitHub
• Re: [webauthn] fixup algs contd 3 =JeffH via GitHub
• Re: [webauthn] user id should be returned in get() Akshay Kumar via GitHub
• Re: [webauthn] user id should be returned in get() Rolf Lindemann via GitHub
• Re: [webauthn] user id should be returned in get() christiaanbrand via GitHub
• Re: [webauthn] fixup algs contd 3 =JeffH via GitHub
• [w3c/webauthn] 2465b4: updating signcounter consideration according to su... GitHub
• [webauthn] new commits pushed by rlin1 Rolf Lindemann via GitHub
• Re: [webauthn] Sign counter alg 507 Rolf Lindemann via GitHub
• [w3c/webauthn] 92b5bf: addressed second last comment GitHub
• [webauthn] new commits pushed by rlin1 Rolf Lindemann via GitHub
• [w3c/webauthn] 7a8ad4: more corrections according to the comments in the ... GitHub
• [webauthn] new commits pushed by rlin1 Rolf Lindemann via GitHub
• Re: [webauthn] Consider requiring canonical CBOR throughout Johan Verrept via GitHub
• 09/13/2017 W3C Web Authentication WG Meeting Agenda Anthony Nadalin
• RE: Eleven comments on " Web Authentication: An API for accessing Public Key Credentials". W3C Working Draft, 5 May 2017 Anthony Nadalin

Tuesday, 12 September 2017

• Re: [webauthn] Address security and privacy issues witht the iconURL Anthony Nadalin via GitHub
• Re: [webauthn] Remove user agent getting user consent sentence Anthony Nadalin via GitHub
• Re: [webauthn] fixup algs contd 3 Anthony Nadalin via GitHub
• Re: [webauthn] Consider requiring canonical CBOR throughout Mike Jones via GitHub
• [w3c/webauthn] 2465b4: updating signcounter consideration according to su... GitHub
• [webauthn] new commits pushed by rlin1 Rolf Lindemann via GitHub
• Re: [webauthn] Sign counter alg 507 Rolf Lindemann via GitHub
• [w3c/webauthn] ee384b: added alternative: MSB to indicate signCounter sup... GitHub
• [webauthn] new commits pushed by rlin1 Rolf Lindemann via GitHub
• Re: [webauthn] keyType: "public-key" is superfluous Rolf Lindemann via GitHub
• Re: [webauthn] Not necessary to pass AuthenticatorSelectionCriteria members to authenticatorMakeCredential() Rolf Lindemann via GitHub
• Re: [webauthn] Consider requiring canonical CBOR throughout Johan Verrept via GitHub
• [webauthn] Safetynet attestation does not return byte array as a response. Ki-Eun Shin via GitHub
• Re: [webauthn] keyType: "public-key" is superfluous =JeffH via GitHub
• Re: [webauthn] Refine meaning of PublicKeyCredentialType to be "signature & assertion format (and version thereof)" =JeffH via GitHub
• Re: [webauthn] using descriptive names for authenticator selection criteria =JeffH via GitHub
• please review credman PR#100 and webauthn PR#498.. (fixup algs contd 3) =JeffH
• Re: [webauthn] Sign counter alg 507 =JeffH via GitHub

Monday, 11 September 2017

• Re: [webauthn] Sign counter alg 507 John Bradley
• reviewed current state of PR #539 =JeffH
• Re: [webauthn] undefined terms =JeffH via GitHub
• Re: [webauthn] #registering-a-new-credential step 10 breakage =JeffH via GitHub
• Re: [webauthn] Consider requiring canonical CBOR throughout Mike Jones via GitHub
• Closed: [webauthn] Consider requiring canonical CBOR throughout Mike Jones via GitHub
• [webauthn] incosistent concatenation symbols - notational conventions section? =JeffH via GitHub
• [webauthn] #registering-a-new-credential step 10 breakage =JeffH via GitHub
• Re: [webauthn] .store() is confusing Angelo Liao via GitHub
• Re: [webauthn] .store() is confusing Anthony Nadalin via GitHub
• [webauthn] ensure #registering-a-new-credential step 10 and the inputs to all attStmt types' verification procedures match =JeffH via GitHub
• Re: [webauthn] Not clear what's executed in parallel in Section 4.1.3, Step 24.3 Angelo Liao via GitHub
• [w3c/webauthn] ad54fb: correction: bikeshed still wants spaces - not tabs GitHub
• [webauthn] new commits pushed by rlin1 Rolf Lindemann via GitHub
• [w3c/webauthn] bc8e9a: corrected phrase as indicated by equalsJeffH GitHub
• [webauthn] new commits pushed by rlin1 Rolf Lindemann via GitHub
• Re: [webauthn] Sign counter alg 507 Rolf Lindemann via GitHub
• Re: [webauthn] Sign counter alg 507 Adam Langley via GitHub
• Re: [webauthn] U2F Attestation only lists Basic Attestation as supported Emil Lundberg via GitHub
• Re: [webauthn] Sign counter alg 507 Johan Verrept via GitHub
• Re: [webauthn] .store() is confusing Mike West via GitHub
• Re: [webauthn] Sign counter alg 507 Johan Verrept via GitHub

Saturday, 9 September 2017

• Re: [webauthn] Sign counter alg 507 Adam Langley via GitHub
• Re: [webauthn] include public key in result from create() Akshay Kumar via GitHub
• Re: [webauthn] user id should be returned in get() Akshay Kumar via GitHub
• Re: [webauthn] Sign counter alg 507 John Bradley via GitHub
• Re: [webauthn] Fix Android attestation christiaanbrand via GitHub
• Re: [webauthn] An issue about setAttestationChallenge() in "android-key" attestation statement christiaanbrand via GitHub

Friday, 8 September 2017

• [webauthn] Not clear what's executed in parallel in Section 4.1.3, Step 24.3 balfanz via GitHub
• Re: [webauthn] should authenticatorExtensions really be a dictionary? balfanz via GitHub
• Re: [webauthn] Sign counter alg 507 Jakob Ehrensvard via GitHub
• Re: [webauthn] keyType: "public-key" is superfluous Anthony Nadalin via GitHub
• Re: [webauthn] include public key in result from create() balfanz via GitHub
• [webauthn] include public key in PublicKeyCredential balfanz via GitHub
• Re: [webauthn] basicIntegrity in SafetyNet documentation not sufficiently defined John Bradley via GitHub
• [webauthn] user id should be returned in get() balfanz via GitHub
• [w3c/webauthn] df905a: using descriptive names for authenticator selectio... GitHub
• [webauthn] new commits pushed by balfanz balfanz via GitHub
• [webauthn] keyType: "public-key" is superfluous balfanz via GitHub
• Re: [webauthn] basicIntegrity in SafetyNet documentation not sufficiently defined Jeffrey Yasskin via GitHub
• Re: [webauthn] Sign counter alg 507 John Bradley via GitHub
• Re: [webauthn] .store() is confusing Jeffrey Yasskin via GitHub
• Re: [webauthn] Move {#sample-scenarios} (currently Section 10) to the top of the doc Anthony Nadalin via GitHub
• Re: [webauthn] Sign counter alg 507 Adam Langley via GitHub
• Re: [webauthn] "Authenticator extension processing" is likely wrong Anthony Nadalin via GitHub
• Re: [webauthn] should authenticatorExtensions really be a dictionary? Anthony Nadalin via GitHub
• Re: [webauthn] Sign counter alg 507 Emil Lundberg via GitHub
• [w3c/webauthn] 1559de: Remove user agent getting user consent sentence GitHub
• [webauthn] new commits pushed by leshi Alexei Czeskis via GitHub
• [webauthn] The description for creating a new credential has the browser prompting the user for consent Alexei Czeskis via GitHub
• Re: [webauthn] .store() is confusing Angelo Liao via GitHub
• [webauthn] .store() is confusing Alexei Czeskis via GitHub
• [webauthn] should authenticatorExtensions really be a dictionary? balfanz via GitHub
• Re: [webauthn] Sign counter alg 507 John Bradley via GitHub
• Closed: [webauthn] The authenticatorMakeCredential operation section doesn't specify how to pass extensions to authenticator Alexei Czeskis via GitHub
• Re: [webauthn] The authenticatorMakeCredential operation section doesn't specify how to pass extensions to authenticator Alexei Czeskis via GitHub
• [webauthn] The authenticatorMakeCredential operation section doesn't specify how to pass extensions to authenticator Alexei Czeskis via GitHub
• [webauthn] "Authenticator extension processing" is likely wrong Alexei Czeskis via GitHub
• Re: [webauthn] Key types and algorithms are confusing John Bradley via GitHub
• Re: [webauthn] Sign counter alg 507 christiaanbrand via GitHub
• Re: [webauthn] Sign counter alg 507 John Bradley via GitHub
• Re: [webauthn] Sign counter alg 507 Rolf Lindemann via GitHub
• [w3c/webauthn] 20827e: typo GitHub
• [webauthn] new commits pushed by rlin1 Rolf Lindemann via GitHub
• Re: [webauthn] impl guidelines for signature counter John Bradley via GitHub
• [webauthn] Key types and algorithms are confusing balfanz via GitHub
• Re: [webauthn] Sign counter alg 507 christiaanbrand via GitHub
• Re: [webauthn] impl guidelines for signature counter Rolf Lindemann via GitHub
• Re: [webauthn] Sign counter alg 507 christiaanbrand via GitHub
• Re: [webauthn] Fix Android attestation Angelo Liao via GitHub
• Re: [webauthn] PublicKeyCredentialDescriptor.id and PublicKeyCredentialEntity.id type differ Ackermann Yuriy via GitHub
• Re: [webauthn] PublicKeyCredentialDescriptor.id and PublicKeyCredentialEntity.id type differ Angelo Liao via GitHub
• Closed: [webauthn] PublicKeyCredentialDescriptor.id and PublicKeyCredentialEntity.id type differ Angelo Liao via GitHub
• Re: [webauthn] PublicKeyCredentialDescriptor.id and PublicKeyCredentialEntity.id type differ Angelo Liao via GitHub
• Re: [webauthn] PublicKeyCredentialDescriptor.id and PublicKeyCredentialEntity.id type differ Angelo Liao via GitHub
• Re: [webauthn] PublicKeyCredentialDescriptor.id and PublicKeyCredentialEntity.id type differ Ackermann Yuriy via GitHub
• Re: [webauthn] PublicKeyCredentialDescriptor.id and PublicKeyCredentialEntity.id type differ Angelo Liao via GitHub
• Re: [webauthn] impl guidelines for signature counter Anthony Nadalin via GitHub
• Re: [webauthn] Sign counter alg 507 Anthony Nadalin via GitHub
• Re: [webauthn] Sign counter alg 507 Rolf Lindemann via GitHub
• [w3c/webauthn] 14c273: fix proper subset tweak (#542) GitHub
• [webauthn] new commits pushed by rlin1 Rolf Lindemann via GitHub
• Re: [webauthn] Sign counter alg 507 Rolf Lindemann via GitHub
• Re: [webauthn] Sign counter alg 507 Rolf Lindemann via GitHub
• Re: [webauthn] PublicKeyCredentialDescriptor.id and PublicKeyCredentialEntity.id type differ Ackermann Yuriy via GitHub
• Re: [webauthn] Sign counter alg 507 Rolf Lindemann via GitHub
• Re: [webauthn] impl guidelines for signature counter Rolf Lindemann via GitHub
• [w3c/webauthn] GitHub
• [webauthn] new commits pushed by balfanz balfanz via GitHub
• Re: [webauthn] fixup algs contd 3 =JeffH via GitHub
• [w3c/webauthn] 1f096d: incorp comments from mikewest at webappsec-credent... GitHub
• [webauthn] new commits pushed by equalsJeffH =JeffH via GitHub

Thursday, 7 September 2017

• Re: [webauthn] Android SafetyNet Attestation lacks information on authenticator provenance John Bradley via GitHub
• Re: [webauthn] restrict WebAuthentication API to only top level browsing context Angelo Liao via GitHub
• Re: [webauthn] basicIntegrity in SafetyNet documentation not sufficiently defined gmandyam via GitHub
• Re: [webauthn] PublicKeyCredentialDescriptor.id and PublicKeyCredentialEntity.id type differ Angelo Liao via GitHub
• Re: [webauthn] basicIntegrity in SafetyNet documentation not sufficiently defined Mike Jones via GitHub
• Re: [webauthn] basicIntegrity in SafetyNet documentation not sufficiently defined gmandyam via GitHub
• Re: [webauthn] basicIntegrity in SafetyNet documentation not sufficiently defined gmandyam via GitHub
• Re: [webauthn] PublicKeyCredentialDescriptor.id and PublicKeyCredentialEntity.id type differ Angelo Liao via GitHub
• Re: [webauthn] Make AuthenticatorSelectionCriteria more complete. Anthony Nadalin via GitHub
• Re: [webauthn] basicIntegrity in SafetyNet documentation not sufficiently defined Mike Jones via GitHub
• Re: [webauthn] basicIntegrity in SafetyNet documentation not sufficiently defined Anthony Nadalin via GitHub
• Re: [webauthn] basicIntegrity in SafetyNet documentation not sufficiently defined gmandyam via GitHub
• Re: [webauthn] Android SafetyNet Attestation lacks information on authenticator provenance Anthony Nadalin via GitHub
• Re: [webauthn] basicIntegrity in SafetyNet documentation not sufficiently defined Anthony Nadalin via GitHub
• Re: [webauthn] ctsprofilematch in SafetyNet documentation not sufficiently defined Anthony Nadalin via GitHub
• Re: [webauthn] Make AuthenticatorSelectionCriteria more complete. Anthony Nadalin via GitHub
• Re: [webauthn] PublicKeyCredentialDescriptor.id and PublicKeyCredentialEntity.id type differ Anthony Nadalin via GitHub
• Re: [webauthn] various issues with AppId extension Anthony Nadalin via GitHub
• Re: [webauthn] #createCredential step 12 incorrectly refers to a timer Anthony Nadalin via GitHub
• Re: [webauthn] need description & illustrations of overall flow: authnr <--> platform API <--> RP Angelo Liao via GitHub
• Re: [webauthn] #createCredential step 12 incorrectly refers to a timer Ackermann Yuriy via GitHub
• Re: [webauthn] need description & illustrations of overall flow: authnr <--> platform API <--> RP =JeffH via GitHub
• Re: [webauthn] Not necessary to pass AuthenticatorSelectionCriteria members to authenticatorMakeCredential() =JeffH via GitHub
• Re: [webauthn] Authenticator selection extension needs to define snapshotting behavior Boris Zbarsky via GitHub
• Re: [webauthn] RawId vs Id is confusing Anthony Nadalin via GitHub
• Re: [webauthn] restrict WebAuthentication API to only top level browsing context Anthony Nadalin via GitHub
• Re: [webauthn] "WebAuthn Authenticator model" seemingly prohibits random AAGUIDs (minor) Anthony Nadalin via GitHub
• Re: [webauthn] Correct uses of "JSON string" versus "DOMString" and other string terminology usage Anthony Nadalin via GitHub
• Re: [webauthn] Replace Authenticator Model with CTAP Anthony Nadalin via GitHub
• Closed: [webauthn] makeCredential should be more precise than NotAllowedError in its last step Mike Jones via GitHub
• Re: [webauthn] makeCredential should be more precise than NotAllowedError in its last step Mike Jones via GitHub

Wednesday, 6 September 2017

• Re: [webauthn] makeCredential should be more precise than NotAllowedError in its last step Anthony Nadalin via GitHub
• Re: [webauthn] UVM Extension Editorial Change Anthony Nadalin via GitHub
• Re: [webauthn] Refine meaning of PublicKeyCredentialType to be "signature & assertion format (and version thereof)" Anthony Nadalin via GitHub
• Closed: [webauthn] New research suggest using ED512 instead of ED256. Mike Jones via GitHub
• Re: [webauthn] New research suggest using ED512 instead of ED256. Mike Jones via GitHub
• Re: [webauthn] Consider using USVString instead of DOMString sometimes Mike Jones via GitHub
• Closed: [webauthn] Consider using USVString instead of DOMString sometimes Mike Jones via GitHub
• Re: [webauthn] The W3C HTML spec is broken, and probably shouldn't be referenced Angelo Liao via GitHub
• Re: [webauthn] The W3C HTML spec is broken, and probably shouldn't be referenced Anthony Nadalin via GitHub
• Re: fyi: client nonce security analysis John Bradley
• Re: [webauthn] Authenticator selection extension - should makeCredential fail if no specified authenticator can be found? Anthony Nadalin via GitHub
• Re: [webauthn] Consider using USVString instead of DOMString sometimes Anthony Nadalin via GitHub
• Re: [webauthn] New research suggest using ED512 instead of ED256. Anthony Nadalin via GitHub
• Re: [webauthn] "might be present on this authenticator" could use a clearer definition =JeffH via GitHub
• Closed: [webauthn] "might be present on this authenticator" could use a clearer definition =JeffH via GitHub
• Closed: [webauthn] It would be nice if the definition of "Scoped Credential" said something about what `identifier` and `type` are =JeffH via GitHub
• Re: [webauthn] It would be nice if the definition of "Scoped Credential" said something about what `identifier` and `type` are =JeffH via GitHub
• Closed: [webauthn] Drop UAF references in favor of better explanation =JeffH via GitHub
• Re: [webauthn] Drop UAF references in favor of better explanation =JeffH via GitHub
• Re: [webauthn] restrict WebAuthentication API to only top level browsing context =JeffH via GitHub
• Re: [webauthn] parameter lists in #createCredential and #op-make-cred do not match =JeffH via GitHub
• fyi: client nonce security analysis =JeffH
• Re: [webauthn] Sign counter alg 507 John Bradley via GitHub
• Re: [webauthn] It would be nice if the definition of "Scoped Credential" said something about what `identifier` and `type` are Angelo Liao via GitHub
• Re: [webauthn] Sign counter alg 507 Rolf Lindemann via GitHub
• Closed: [webauthn] Specify what happens when the Client receives invalid CBOR Angelo Liao via GitHub
• Re: [webauthn] Specify what happens when the Client receives invalid CBOR Angelo Liao via GitHub
• Closed: [webauthn] authenticatorGetAssertion showing selection UI for external authenticators Angelo Liao via GitHub
• Re: [webauthn] authenticatorGetAssertion showing selection UI for external authenticators Angelo Liao via GitHub
• Re: [webauthn] Drop UAF references in favor of better explanation Anthony Nadalin via GitHub
• Re: [webauthn] FIDO U2F Attestation Statement Format doesn't say what to do with AAGUID Mike Jones via GitHub
• Re: [webauthn] Sign counter alg 507 John Bradley via GitHub
• Accessibility Questions from APA Janina Sajka
• Re: [webauthn] Sign counter alg 507 Akshay Kumar via GitHub
• 09/06/2017 W3C Web Authentication WG Meeting Agenda Anthony Nadalin
• Re: [webauthn] remove "required" on ScopedCredentialDescriptor.id Angelo Liao via GitHub
• Re: [webauthn] Not necessary to pass AuthenticatorSelectionCriteria members to authenticatorMakeCredential() Angelo Liao via GitHub
• Re: [webauthn] Make create() and get() abortable Angelo Liao via GitHub
• Re: [webauthn] Make create() and get() abortable Angelo Liao via GitHub
• Re: [webauthn] Make create() and get() abortable Angelo Liao via GitHub
• Re: [webauthn] Make create() and get() abortable Angelo Liao via GitHub

Tuesday, 5 September 2017

• Closed: [webauthn] Consider allowing authenticators to randomise signed hashes. Adam Langley via GitHub
• Re: [webauthn] Consider allowing authenticators to randomise signed hashes. Adam Langley via GitHub
• Re: [webauthn] Sign counter alg 507 Adam Langley via GitHub
• Re: [webauthn] restrict WebAuthentication API to only top level browsing context Anthony Nadalin via GitHub
• Re: [webauthn] Consider allowing authenticators to randomise signed hashes. Angelo Liao via GitHub
• Re: [webauthn] Sign counter alg 507 Johan Verrept via GitHub
• Re: [webauthn] musings wrt webauthn's profile of COSE_Key =JeffH via GitHub
• Re: [webauthn] Sign counter alg 507 Akshay Kumar via GitHub

Monday, 4 September 2017

• Re: [webauthn] musings wrt webauthn's profile of COSE_Key Akshay Kumar via GitHub
• Re: [webauthn] change "credential public key" to "user public key" Akshay Kumar via GitHub
• Re: [webauthn] Consider requiring canonical CBOR throughout Johan Verrept via GitHub
• Re: [webauthn] Sign counter alg 507 Jakob Ehrensvard via GitHub

Sunday, 3 September 2017

• Re: [webauthn] Consider allowing authenticators to randomise signed hashes. Adam Langley via GitHub
• Re: [webauthn] Sign counter alg 507 Adam Langley via GitHub
• [webauthn] musings wrt webauthn's profile of COSE_Key =JeffH via GitHub

Saturday, 2 September 2017

• Re: [webauthn] rename "attestation data" to be "attested credential" Angelo Liao via GitHub
• Re: [webauthn] Consider allowing authenticators to randomise signed hashes. Angelo Liao via GitHub
• Re: [webauthn] FIDO U2F Attestation Statement Format doesn't say what to do with AAGUID Angelo Liao via GitHub
• Re: [webauthn] Not necessary to pass AuthenticatorSelectionCriteria members to authenticatorMakeCredential() Angelo Liao via GitHub
• Re: [webauthn] change "credential public key" to "user public key" Angelo Liao via GitHub

Friday, 1 September 2017

• [w3c/webauthn] 515acc: Built by Travis-CI: 14c2733ca6a4a9568e4c48fef1b870... GitHub
• [webauthn] new commits pushed by WebAuthnBot WebAuthnBot via GitHub
• Re: [webauthn] Must returned extensions be mathematically proper subsets of requested extensions? Angelo Liao via GitHub
• Closed: [webauthn] Must returned extensions be mathematically proper subsets of requested extensions? Angelo Liao via GitHub
• [w3c/webauthn] 14c273: fix proper subset tweak (#542) GitHub
• [webauthn] new commits pushed by AngeloKai Angelo Liao via GitHub
• Re: [webauthn] Remove "proper subset" from extension algorithm Angelo Liao via GitHub
• Re: [webauthn] Must returned extensions be mathematically proper subsets of requested extensions? Emil Lundberg via GitHub

Last message date: Saturday, 30 September 2017 23:41:03 UTC