W3C WebAuthn F2F Draft Agenda for March 7th 2019
Closed: [webauthn] Candidate recommendation exit criteria (#837)
[webauthn] Define a attestation format with RFC8152-style signing? (#1164)
[w3c/webauthn] 80c8e8: Built by Travis-CI: 7bc2f0366c10e44d90390f2c894273...
[w3c/webauthn]
[webauthn] new commits pushed by WebAuthnBot
[w3c/webauthn] a68031: Add examples of authenticator types to Authenticat...
[webauthn] Merged Pull Request: Add examples of authenticator types to Authenticator definition
[webauthn] new commits pushed by emlun
Re: [webauthn] add notion of "enterprise" attestation (#1147)
Closed: [webauthn] Propose extension: Delegation of Authentication (#1125)
[w3c/webauthn] b3ca18: Use — instead of -
[webauthn] new commits pushed by emlun
02/27/2019 W3C Web Authentication WG Meeting Agenda
[webauthn] No way to identify authenticator type whether is is platform or roaming if RP does not specify the type during registration (#1163)
- Re: [webauthn] No way to identify authenticator type whether is is platform or roaming if RP does not specify the type during registration (#1163)
- Re: [webauthn] No way to identify authenticator type whether is is platform or roaming if RP does not specify the type during registration (#1163)
- Closed: [webauthn] No way to identify authenticator type whether is is platform or roaming if RP does not specify the type during registration (#1163)
- Re: [webauthn] No way to identify authenticator type whether is is platform or roaming if RP does not specify the type during registration (#1163)
[webauthn] Refine User Verification description (#1162)
- Re: [webauthn] Refine User Verification description (#1162)
- Re: [webauthn] Refine User Verification description (#1162)
Man-in-the-middle attack against WebAuthn by a powerful attacker
- Re: Man-in-the-middle attack against WebAuthn by a powerful attacker
- Re: Man-in-the-middle attack against WebAuthn by a powerful attacker
[webauthn] Pull Request: Fixed various links, including new TR link
[w3c/webauthn] 63640b: Fixed various links, including new TR link
[webauthn] new commits pushed by plehegar
Re: [webauthn] SafetyNet Attestation Clarifications (#968)
- Re: [webauthn] SafetyNet Attestation Clarifications (#968)
- Re: [webauthn] SafetyNet Attestation Clarifications (#968)
Closed: [webauthn] What is the point of `allowCredentials`? (#867)
Re: [webauthn] What is the point of `allowCredentials`? (#867)
Closed: [webauthn] Authenticator disconnect event (#1107)
Re: [webauthn] Authenticator disconnect event (#1107)
Re: [webauthn] WebAuthn available to Workers? aka "silent authentication" (#199)
Closed: [webauthn] Add required matcher protection to AuthenticatorSelectionCriteria (#447)
Re: [webauthn] Add required matcher protection to AuthenticatorSelectionCriteria (#447)
Closed: [webauthn] Add required key protection to AuthenticatorSelectionCriteria (#446)
Re: [webauthn] Add required key protection to AuthenticatorSelectionCriteria (#446)
Re: [webauthn] Add biometric accuracy to AuthenticatorSelectionCriteria (#445)
Closed: [webauthn] Add biometric accuracy to AuthenticatorSelectionCriteria (#445)
Closed: [webauthn] Protect against TLS MiTM by including TLS cert chain in signature (#391)
Re: [webauthn] Protect against TLS MiTM by including TLS cert chain in signature (#391)
Re: [webauthn] remove "required" on ScopedCredentialDescriptor.id (#245)
[w3c/webauthn] 0987e6: Built by Travis-CI: 4c074692cdf1da862d494ca35c0c2b...
[webauthn] new commits pushed by WebAuthnBot
[w3c/webauthn] 143e42: Built by Travis-CI: 4c074692cdf1da862d494ca35c0c2b...
[w3c/webauthn]
[webauthn] new commits pushed by WebAuthnBot
[w3c/webauthn] e09147: Fix android-safetynet trust path
[webauthn] new commits pushed by emlun
Closed: [webauthn] Is android-safetynet attestation trust path limited to one cert? (#1132)
[webauthn] Merged Pull Request: Fix android-safetynet trust path
[w3c/webauthn] 0fae76: Built by Travis-CI: b387399a38862919a7e3b2b3fb4c35...
[w3c/webauthn] f240f7: Built by Travis-CI: b387399a38862919a7e3b2b3fb4c35...
[webauthn] new commits pushed by WebAuthnBot
[webauthn] new commits pushed by WebAuthnBot
- WebAuthn and dealing with authenticator firmware updates
[w3c/webauthn] d5facf: Add definition alias "WebAuthn Authenticator"
[webauthn] new commits pushed by emlun
[webauthn] Merged Pull Request: Add "Webauthn Authenticator" definition alias
02/20/2019 W3C Web Authentication WG Meeting Agenda
[w3c/webauthn] 175d9f: Clarify user identification in RP assertion verifi...
[webauthn] new commits pushed by emlun
[w3c/webauthn]
[w3c/webauthn] 4b28f8: tmp
[webauthn] new commits pushed by emlun
[w3c/webauthn] c599aa: tmp
[webauthn] new commits pushed by emlun
[webauthn] Travis build is broken (#1160)
- Re: [webauthn] Travis build is broken (#1160)
- Re: [webauthn] Travis build is broken (#1160)
- Closed: [webauthn] Travis build is broken (#1160)
- Re: [webauthn] Travis build is broken (#1160)
[w3c/webauthn] 9f7aee: tmp
[webauthn] new commits pushed by emlun
[w3c/webauthn] a2d616: Remove trailing whitespace
[webauthn] new commits pushed by emlun
[webauthn] Pull Request: Fix incorrect AuthenticatorAttachment description
[w3c/webauthn] 9e72ec: Fix incorrect description of AuthenticatorAttachment
[webauthn] new commits pushed by emlun
[w3c/webauthn]
Re: wrt "meta pull-requests" milestone...
[w3c/webauthn]
[w3c/webauthn]
[w3c/webauthn] 175d9f: Clarify user identification in RP assertion verifi...
[webauthn] Merged Pull Request: Use "user handle mapped to user" language in user identification step
[webauthn] new commits pushed by emlun
[w3c/webauthn]
[w3c/webauthn] 109165: Add None attestation case to RP ops registration s...
[webauthn] new commits pushed by emlun
[webauthn] Merged Pull Request: Add None attestation case to RP ops registration step 16
Closed: [webauthn] RP ops registration step 16 is missing a case for None attestation (#1136)
Re: [webauthn] Add registration/authentication extensions for cloud-assisted BLE (#909)
Re: [webauthn] Add examples of authenticator types to Authenticator definition (#1131)
Re: [webauthn] Fix android-safetynet trust path (#1142)
Re: [webauthn] Determine appid extension output after authenticator returns (#1143)
Re: [webauthn] Add None attestation case to RP ops registration step 16 (#1145)
Re: [webauthn] undefined terms and terms we really ought to define (#462)
02/06/2019 W3C Web Authentication WG Meeting Agenda
02/13/2019 W3C Web Authentication WG Meeting Agenda
[w3c/webauthn] 11d549: Provide transport information during registration....
Closed: [webauthn] Platform authenticators and key stores (#851)
[webauthn] new commits pushed by equalsJeffH
Closed: [webauthn] Return the employed AuthenticatorTransport when creating a new credential (#889)
[webauthn] Merged Pull Request: Provide transport information during registration.
[webauthn] WebAuthn API for Browser (like Chrome) extension (#1158)
- Re: [webauthn] WebAuthn API for Browser (like Chrome) extension (#1158)
- Closed: [webauthn] WebAuthn API for Browser (like Chrome) extension (#1158)
Re: [webauthn] Provide transport information during registration. (#1050)
[webauthn] Provide a tutorial app (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Re: [webauthn] Provide a tutorial on creating Authenticators (#1157)
- Closed: [webauthn] Provide a tutorial on creating Authenticators (#1157)
[w3c/webauthn]
[w3c/webauthn] 762aba: Built by Travis-CI: b4a6110c20e7e03b526ad798aa1c8b...
[w3c/webauthn] 906b0d: Built by Travis-CI: b4a6110c20e7e03b526ad798aa1c8b...
[webauthn] new commits pushed by WebAuthnBot
[webauthn] new commits pushed by WebAuthnBot
[w3c/webauthn] b4a611: Recommend minimal basic attestation batches (#1141)
[webauthn] Merged Pull Request: Recommend minimal basic attestation batches
[webauthn] new commits pushed by equalsJeffH
Closed: [webauthn] Attestation privacy advice creates large scale security risks (#1127)
[w3c/webauthn] 910fc5: Built by Travis-CI: c5c29b0eaf3cf072fca263184ab487...
[w3c/webauthn] bffedf: Built by Travis-CI: c5c29b0eaf3cf072fca263184ab487...
[webauthn] new commits pushed by WebAuthnBot
[webauthn] new commits pushed by WebAuthnBot
[w3c/webauthn] c5c29b: update spec to Level 2 (#1156)
[webauthn] new commits pushed by equalsJeffH
Closed: [webauthn] update editor's draft to link to newly published Prop Rec (#1138)
Re: [webauthn] Recommend minimal basic attestation batches (#1141)
Re: [webauthn] Lack of support for modern ECC (#1124)
Closed: [webauthn] Lack of support for modern ECC (#1124)
[webauthn] Pull Request: update spec to Level 2
- Re: [webauthn] update spec to Level 2 (#1156)
- [webauthn] Merged Pull Request: update spec to Level 2
[w3c/webauthn] 160b9b: update spec to Level 2
[webauthn] new commits pushed by equalsJeffH
[webauthn] update working draft to be "level 2" (#1155)
- Re: [webauthn] update working draft to be "level 2" (#1155)
- Re: [webauthn] update working draft to be "level 2" (#1155)
- Closed: [webauthn] update working draft to be "level 2" (#1155)
[w3c/webauthn]
Re: [webauthn] update @equalJeffH's affiliation (#1137)
Closed: [webauthn] update @equalJeffH's affiliation (#1137)
[w3c/webauthn] 0fbb40: update JeffH's affiliation (#1154)
[webauthn] new commits pushed by equalsJeffH
[webauthn] Pull Request: update JeffH's affiliation
- [webauthn] Merged Pull Request: update JeffH's affiliation
- Re: [webauthn] update JeffH's affiliation (#1154)
[w3c/webauthn] bc4e04: update JeffH's affiliation
[webauthn] new commits pushed by equalsJeffH
"WebAuthn Level 1" branch created
[w3c/webauthn]
[webauthn] new commits pushed by equalsJeffH
Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
- Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
- Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
- Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
Re: [webauthn] Unspecified CBOR encoding of high-valued integer numbers due to unspecified threshold (#1044)
[webauthn] AuthenticatorTransport description is incorrect (#1153)
- Re: [webauthn] AuthenticatorTransport description is incorrect (#1153)
- Re: [webauthn] AuthenticatorTransport description is incorrect (#1153)
[w3c/webauthn]
[webauthn] Closed Pull Request: Make appid extension always return true
Re: [webauthn] Make appid extension always return true (#1144)
Re: [webauthn] coalesce HTML references? (#996)
Closed: [webauthn] Ensure hard-coded step references in RP ops are correct (#797)
Re: [webauthn] Ensure hard-coded step references in RP ops are correct (#797)
WebAuthn Face-to-Face on March 7th
Re: [webauthn] Let requireUserPresence always be true in authenticator operations (#1140)
- Re: [webauthn] Let requireUserPresence always be true in authenticator operations (#1140)
- Re: [webauthn] Let requireUserPresence always be true in authenticator operations (#1140)
- Re: [webauthn] Let requireUserPresence always be true in authenticator operations (#1140)
Closed: [webauthn] TPM attestation format & EdDSA & hash alg (#1148)
[w3c/webauthn] 10e5b4: Update wording as suggested by @selfissued
[webauthn] new commits pushed by emlun
[w3c/webauthn] 76cf6d: Fix typo (#1081)
[webauthn] new commits pushed by emlun
02/06/2019 W3C Web Authentication WG Meeting Agenda
Re: [webauthn] No way to verify requireResidentKey during registration step at RP side (#1060)
Re: [webauthn] Clarify relationships between "uv"/"up" of the CTAP spec and "userVerification"/"userPresence" (#1123)
[webauthn] Where is the reference implementation for WebAuthn? (#1152)
- Re: [webauthn] Where is the reference implementation for WebAuthn? (#1152)
- Re: [webauthn] Where is the reference implementation for WebAuthn? (#1152)
- Closed: [webauthn] Where is the reference implementation for WebAuthn? (#1152)
- Re: [webauthn] Where is the reference implementation for WebAuthn? (#1152)
Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
- Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
- Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
- Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
- Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
- Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
- Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
- Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
- Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
- Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
[webauthn] Support for apps acting as platform authenticators for authenticating in mobile browsers (#1150)
- Re: [webauthn] Support for apps acting as platform authenticators for authenticating in mobile browsers (#1150)
- Re: [webauthn] Support for apps acting as platform authenticators for authenticating in mobile browsers (#1150)
- Re: [webauthn] Support for apps acting as platform authenticators for authenticating in mobile browsers (#1150)
- Closed: [webauthn] Support for apps acting as platform authenticators for authenticating in mobile browsers (#1150)
Re: [webauthn] TPM attestation format & EdDSA & hash alg (#1148)
- Re: [webauthn] TPM attestation format & EdDSA & hash alg (#1148)
- Re: [webauthn] TPM attestation format & EdDSA & hash alg (#1148)
- Re: [webauthn] TPM attestation format & EdDSA & hash alg (#1148)
- Re: [webauthn] TPM attestation format & EdDSA & hash alg (#1148)
- Re: [webauthn] TPM attestation format & EdDSA & hash alg (#1148)
- Re: [webauthn] TPM attestation format & EdDSA & hash alg (#1148)