Re: W3C WebAuthn Recommendation schedule

Level 2. Level 2. Sigh.

On Wed, Aug 7, 2019 at 11:23 PM David Waite <dwaite@pingidentity.com> wrote:

> I'm of the opinion that there are plenty of items which are coming up for
> WebAuthn deployments to justify a new WebAuthn specification. To the extent
> new authenticator features affect relying parties and affect user
> experience, both behaviors will need to be supported anyway.
>
> It would be nice to have features like Cred Protect in WebAuthn Layer 2,
> but it sounds like we are considering Layer 2 CR in 2-4 months, and (using
> Cred Protect as an example) this email chain is AFAIK the first mention of
> the term in public.
>
> My understanding is that CTAP is a consumer of the WebAuthn specification,
> and functionality needed by CTAP is contributed back as requirements to
> this working group. So far, very few of these items have been publicly
> discussed.
>
> Thats not to say that a final CTAP 2.1 spec is needed for WebAuthn changes
> - WebAuthn is the API for exposing authenticator features. But so far there
> hasn't been any W3C discourse, so it is challenging to establish them as
> important requirements for Layer 2.
>
> -DW
>


-- 
<https://www.pingidentity.com>[image: Ping Identity]
<https://www.pingidentity.com>
David Waite
Principal Technical Architect, CTO Office
dwaite@pingidentity.com
w: 303 468 2855
Connect with us: [image: Glassdoor logo]
<https://www.glassdoor.com/Overview/Working-at-Ping-Identity-EI_IE380907.11,24.htm>
[image:
LinkedIn logo] <https://www.linkedin.com/company/21870> [image: twitter
logo] <https://twitter.com/pingidentity> [image: facebook logo]
<https://www.facebook.com/pingidentitypage> [image: youtube logo]
<https://www.youtube.com/user/PingIdentityTV> [image: Blog logo]
<https://www.pingidentity.com/en/blog.html>
<https://www.pingidentity.com/content/ping/en/lp/d/p14e-trial.html>
<https://www.pingidentity.com/en/lp/d/p14e-trial.html?utm_source=Email&utm_medium=p14e-trial-sso-mfa-emailsig&utm_campaign=p14e-trial-sso-mfa-emailsig>
<https://www.pingidentity.com/en/lp/d/p14e-trial.html?utm_source=Email&utm_medium=p14e-trial-sso-mfa-emailsig&utm_campaign=p14e-trial-sso-mfa-emailsig>
<https://developer.pingidentity.com/en/signup.html>
<https://developer.pingidentity.com/en/signup.html>
<https://developer.pingidentity.com/en/signup.html>
<https://developer.pingidentity.com/en/signup.html?utm_source=email&utm_medium=P14C-Trial-Email&utm_campaign=P14C-Trial-Email&utm_content=link>
<https://developer.pingidentity.com/en/signup.html?utm_source=email&utm_medium=P14C-Trial-Email&utm_campaign=P14C-Trial-Email&utm_content=link>

-- 
_CONFIDENTIALITY NOTICE: This email may contain confidential and privileged 
material for the sole use of the intended recipient(s). Any review, use, 
distribution or disclosure by others is strictly prohibited.  If you have 
received this communication in error, please notify the sender immediately 
by e-mail and delete the message and any file attachments from your 
computer. Thank you._