Friday, 28 June 2019
- [w3c/webauthn] a36fb0: Built by Travis-CI: 126223e34a0f35d4db42c31a4d0de4...
- [w3c/webauthn] f4c34d: Built by Travis-CI: 126223e34a0f35d4db42c31a4d0de4...
- [webauthn] new commits pushed by WebAuthnBot
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn]
- [w3c/webauthn] 126223: bikeshed cleanup: refs (#1241)
- [webauthn] new commits pushed by equalsJeffH
- [webauthn] Merged Pull Request: bikeshed cleanup: refs
- Closed: [webauthn] cleanup: mark & structure biblio references consistently (#872)
- Re: [webauthn] Add “appidExclude” extension. (#1244)
Thursday, 27 June 2019
- Re: [webauthn] Add “appidExclude” extension. (#1244)
- [w3c/webauthn] a1f635: coalesce HTML refs (#1243)
- [webauthn] new commits pushed by equalsJeffH
- [w3c/webauthn] 7c43fe: Built by Travis-CI: a1f635032b104f4cc8f05ef8f16544...
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn] b9680d: Built by Travis-CI: a1f635032b104f4cc8f05ef8f16544...
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn]
- [w3c/webauthn] a1f635: coalesce HTML refs (#1243)
- [webauthn] Merged Pull Request: coalesce HTML refs
- [webauthn] new commits pushed by equalsJeffH
- Closed: [webauthn] coalesce HTML references? (#996)
- [webauthn] Pull Request: Apply edits suggested in PR #1242 review
- [w3c/webauthn] dcc510: Apply edits suggested in PR #1242 review
- [webauthn] new commits pushed by emlun
- [webauthn] Editorial improvements to use cases section (#1247)
- Re: [webauthn] Add “appidExclude” extension. (#1244)
- [webauthn] Privacy risk from revealing allowed credentials (#1246)
- Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
- Re: [webauthn] Add “appidExclude” extension. (#1244)
- [w3c/webauthn] c2b39d: Clarify that a single user might be several persons
- [webauthn] new commits pushed by equalsJeffH
- [w3c/webauthn] 97a978: fix incorrect dfn links, thx emlun!
- [webauthn] new commits pushed by equalsJeffH
Wednesday, 26 June 2019
- Re: [webauthn] bikeshed cleanup: refs (#1241)
- [w3c/webauthn] c2b39d: Clarify that a single user might be several persons
- [webauthn] new commits pushed by equalsJeffH
- [w3c/webauthn] aa4e2a: Built by Travis-CI: 78ed130d0dffc0717aa415dff84ea4...
- [w3c/webauthn] 0c2609: Built by Travis-CI: 78ed130d0dffc0717aa415dff84ea4...
- [webauthn] new commits pushed by WebAuthnBot
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn]
- [w3c/webauthn] 78ed13: move the scenarios section up with the use cases s...
- [webauthn] new commits pushed by equalsJeffH
- Closed: [webauthn] move sample scenarios section up to be after use cases section (#1101)
- [webauthn] Merged Pull Request: move the scenarios section up with the use cases section
- [w3c/webauthn] c2b39d: Clarify that a single user might be several persons
- [webauthn] new commits pushed by equalsJeffH
- Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
- Re: [webauthn] Re-focus resident key descriptions on allowCredentials aspect (#1197)
- Closed: [webauthn] Where is the code implementation for roaming authenticators? (#1221)
- [w3c/webauthn] d3971b: Built by Travis-CI: 268fff60da835ae54003bd9962f969...
- [w3c/webauthn] d4cded: Built by Travis-CI: 268fff60da835ae54003bd9962f969...
- [webauthn] new commits pushed by WebAuthnBot
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn] 6db32a: Built by Travis-CI: d064d92d02dfbf9bdd33597aae2645...
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn] 48dc5f: Built by Travis-CI: d064d92d02dfbf9bdd33597aae2645...
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn] 268fff: Correctly refer to the FIDO U2F JavaScript API and...
- [webauthn] Merged Pull Request: Correctly refer to the FIDO U2F JavaScript API and informatively refe…
- Closed: [webauthn] correctly refer to FIDO JavaScript APIs spec (#1233)
- [webauthn] new commits pushed by equalsJeffH
- Re: [webauthn] Correctly refer to the FIDO U2F JavaScript API and informatively refe… (#1239)
- [w3c/webauthn]
- [w3c/webauthn] c2b39d: Clarify that a single user might be several persons
- [webauthn] new commits pushed by emlun
- Closed: [webauthn] Refine User Verification description (#1162)
- [webauthn] Merged Pull Request: Clarify that a single user might be several persons
- Re: [webauthn] move the scenarios section up with the use cases section (#1242)
- Re: [webauthn] Pass through other assertion formats (#1232)
- Re: [webauthn] Add “appidExclude” extension. (#1244)
- [w3c/webauthn] 0ef7c3: delete obsolete HTML53 anchor block
- [webauthn] new commits pushed by equalsJeffH
- Re: [webauthn] move the scenarios section up with the use cases section (#1242)
- Re: [webauthn] Clarify that a single user might be several persons (#1238)
- [w3c/webauthn] bbc9d9: Revert "Concretize "security boundary defining the...
- [webauthn] new commits pushed by emlun
- Re: [webauthn] Clarify that a single user might be several persons (#1238)
- [w3c/webauthn] 3e653f: merge from master and fix conflicts
- [webauthn] new commits pushed by equalsJeffH
- Re: [webauthn] Clarify that a single user might be several persons (#1238)
- Re: [webauthn] Clarify that a single user might be several persons (#1238)
- [w3c/webauthn] ce353c: remove all trailing whitespace
- [webauthn] new commits pushed by emlun
- [w3c/webauthn] cf0a69: Built by Travis-CI: 9fd1f030aef1d56da53bd3dbcb960d...
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn] 22ddb7: Built by Travis-CI: 9fd1f030aef1d56da53bd3dbcb960d...
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn]
- [w3c/webauthn] ce353c: remove all trailing whitespace
- [webauthn] new commits pushed by emlun
- [webauthn] Merged Pull Request: bikeshed cleanup: remove all trailing whitespace
- [w3c/webauthn] 3996ab: Update User Verification to @equalsJeffH's proposal
- Re: [webauthn] Clarify that a single user might be several persons (#1238)
- [webauthn] new commits pushed by emlun
- PSA: Summary of new features in WebAuthn L2 FPWD relative to the WebAuthn Level 1 Recommendation
- [webauthn] Closed Pull Request: enhance/polish Appidexclude extension definition
- [webauthn] Pull Request: enhance/polish Appidexclude extension definition
Tuesday, 25 June 2019
Monday, 24 June 2019
- [webauthn] Pull Request: Add “appidExclude” extension.
- [webauthn] Pull Request: coalesce HTML refs
- [w3c/webauthn] fe1524: fix #996 coalesce HTML refs
- [webauthn] new commits pushed by equalsJeffH
- Re: [webauthn] Clarify that a single user might be several persons (#1238)
Saturday, 22 June 2019
- [webauthn] Pull Request: fix-1101-move-scenarios-section
- [w3c/webauthn] 2bc786: fix-1101-move-scenarios-section
- [webauthn] new commits pushed by equalsJeffH
Friday, 21 June 2019
- [w3c/webauthn] 045600: TR29 -> UTR29
- [webauthn] new commits pushed by equalsJeffH
- [webauthn] Pull Request: bikeshed cleanup: refs
- [w3c/webauthn] 168db8: fixup syntax of various links and add proper UTR29...
- [webauthn] new commits pushed by equalsJeffH
- [webauthn] Pull Request: bikeshed-cleanup2: remove all trailing whitespace
- [w3c/webauthn] ce353c: remove all trailing whitespace
- [webauthn] new commits pushed by equalsJeffH
- [w3c/webauthn] e7d44d: Mkae client data hash step the same between RP ops
- [webauthn] new commits pushed by equalsJeffH
Thursday, 20 June 2019
- Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
- Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
Wednesday, 19 June 2019
- Horizontal Review Update: APA's Updated CAPTCHA Note Draft
- [w3c/webauthn] b69617: Built by Travis-CI: ee7b6e4a0a9ddf78df64c2180c0655...
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn] 2e6a23: Built by Travis-CI: ee7b6e4a0a9ddf78df64c2180c0655...
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn]
- [w3c/webauthn] 8a4e92: Draft improved guidance for using appid extension
- [webauthn] new commits pushed by emlun
- Closed: [webauthn] Document that U2F key handle = credential ID (#1229)
- [webauthn] Merged Pull Request: Add guidance on using U2F key handles with appid extension
- Re: [webauthn] Clarify that a single user might be several persons (#1238)
- Re: [webauthn] Browser capability detection. (#1219)
- Re: [webauthn] Can't exclude U2F credentals (#1235)
- Re: [webauthn] Where is the code implementation for roaming authenticators? (#1221)
- Closed: [webauthn] Extensible data structure for Authenticator Data (#1220)
- Re: [webauthn] Extensible data structure for Authenticator Data (#1220)
- Re: [webauthn] Provide API for indicating whether the platform has attached(bound) authenticator or not (#1218)
- [w3c/webauthn] 8f4b77: Built by Travis-CI: 96d7758f086f7b8e9b0aecde8e6f44...
- [webauthn] new commits pushed by WebAuthnBot
- Closed: [webauthn] Enforce specific user verification methods (#1211)
- Re: [webauthn] Enforce specific user verification methods (#1211)
- [w3c/webauthn] f1eb40: Built by Travis-CI: 96d7758f086f7b8e9b0aecde8e6f44...
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn]
- [w3c/webauthn] 829866: Use [=authorization gesture=] term in authenticato...
- [webauthn] new commits pushed by emlun
- [webauthn] Merged Pull Request: Use "authorization gesture" term in authenticator operations
- Closed: [webauthn] double check language regarding requiring authorization gesture (#1215)
- Re: [webauthn] Add guidance on using U2F key handles with appid extension (#1230)
- Re: [webauthn] Browser capability detection. (#1219)
- Re: [webauthn] Browser capability detection. (#1219)
- [webauthn] Pull Request: Correctly refer to the FIDO U2F JavaScript API and informatively refe…
- Re: [webauthn] Clarify that a single user might be several persons (#1238)
- [webauthn] Pull Request: Clarify that a single user might be several persons
- [w3c/webauthn] c2b39d: Clarify that a single user might be several persons
- [webauthn] new commits pushed by emlun
- [webauthn] Pull Request: Use "authorization gesture" term in authenticator operations
- [w3c/webauthn] 829866: Use [=authorization gesture=] term in authenticato...
- [webauthn] new commits pushed by emlun
- [w3c/webauthn] 414e26: Add note about appid extension to RP assertion ver...
- [webauthn] new commits pushed by emlun
- Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
- Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
- Re: [webauthn] Browser capability detection. (#1219)
Tuesday, 18 June 2019
- Re: [webauthn] Browser capability detection. (#1219)
- 06/19/2019 W3C Web Authentication WG Meeting Agenda
- [webauthn] Create a WebDriver Virtual Authenticator extension to allow automated testing (#1236)
- [w3c/webauthn] 1d414c: Scope down the set of supported capabilities to on...
- [webauthn] new commits pushed by jafisher-microsoft
- Re: [webauthn] Enforce specific user verification methods (#1211)
Monday, 17 June 2019
Saturday, 15 June 2019
Monday, 17 June 2019
- Re: [webauthn] How do I use a smart phone as an authenticator when the web application is running on a laptop/desktop? (#954)
- Re: [webauthn] Enforce specific user verification methods (#1211)
- Re: [webauthn] Enforce specific user verification methods (#1211)
Sunday, 16 June 2019
- Re: [webauthn] Divide Security/Privacy Considerations into subsections by audience? (#1039)
- Re: [webauthn] Can't exclude U2F credentals (#1235)
Saturday, 15 June 2019
Thursday, 13 June 2019
- Re: [webauthn] Add explicit description on what should be done in incognito/private browsing mode (#1174)
- Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
- Re: [webauthn] Pass through other assertion formats (#1232)
- Re: [webauthn] Can't exclude U2F credentals (#1235)
- Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
- Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
- Re: [webauthn] Enforce specific user verification methods (#1211)
Wednesday, 12 June 2019
- Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
- Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
- Re: [webauthn] Divide Security/Privacy Considerations into subsections by audience? (#1039)
- Re: [webauthn] Can't exclude U2F credentals (#1235)
- Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
- Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
- Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
- Closed: [webauthn] Q: Regarding Security Concerns Surrounding WebAuthn: Don't Implement ECDAA (Yet) (#1196)
- Re: [webauthn] Q: Regarding Security Concerns Surrounding WebAuthn: Don't Implement ECDAA (Yet) (#1196)
- Re: [webauthn] Enforce specific user verification methods (#1211)
- Re: [webauthn] Update name, displayname and icon for RP and user (#1200)
- Re: [webauthn] Browser capability detection. (#1219)
- Re: [webauthn] Q: Regarding Security Concerns Surrounding WebAuthn: Don't Implement ECDAA (Yet) (#1196)
- Re: [webauthn] How to get supported client extension (#1199)
- Re: [webauthn] Add explicit description on what should be done in incognito/private browsing mode (#1174)
- Re: [webauthn] Add notion of forbidding resident credential creation (#1149)
- Re: [webauthn] enrichen registration and authentication ceremonies definitions (#1099)
- [w3c/webauthn]
- Re: [webauthn] Unspecified CBOR encoding of high-valued integer numbers due to unspecified threshold (#1044)
- Re: [webauthn] Divide Security/Privacy Considerations into subsections by audience? (#1039)
- Re: [webauthn] Unspecified CBOR encoding of high-valued integer numbers due to unspecified threshold (#1044)
- Re: [webauthn] TPM section is missing TPMT_PUBLIC validation steps (#929)
- [w3c/webauthn]
- Re: [webauthn] Authenticators that do not recognize any handles shouldn't just be dropped on the floor (#863)
- [webauthn] Can't exclude U2F credentals (#1235)
- [w3c/webauthn] 6052a8: Built by Travis-CI: 00127b7f148b104b54328d7d301469...
- [w3c/webauthn] e23795: Built by Travis-CI: 00127b7f148b104b54328d7d301469...
- [webauthn] new commits pushed by WebAuthnBot
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn] 2b6d1e: Built by Travis-CI: 4cc6257d66aba1ee1d4d78c6ad4727...
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn]
- [w3c/webauthn] 1a48f8: Add RP ops step of verifying credential key algorithm
- [webauthn] Merged Pull Request: Add RP ops step of verifying credential key algorithm
- [webauthn] new commits pushed by emlun
- Closed: [webauthn] Missing steps of checking pubKeyCredParams during registration step at RP server (#1061)
- [w3c/webauthn] e7d44d: Mkae client data hash step the same between RP ops
- [webauthn] new commits pushed by emlun
- [webauthn] Merged Pull Request: Clean up RP operations
- [w3c/webauthn] 70e2a7: Built by Travis-CI: db05b82f794944f409117d817c038a...
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn] db05b8: Re-merge PR #1165 (#1234)
- [webauthn] new commits pushed by equalsJeffH
- [webauthn] Merged Pull Request: Re-merge PR #1165
- Re: [webauthn] move sample scenarios section up to be after use cases section (#1101)
- Re: 06/12/2019 W3C Web Authentication WG Meeting Agenda
- Cleaned up stale branches
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [w3c/webauthn]
- [webauthn] Pull Request: Re-merge PR #1165
- Re: [webauthn] Add example of different RP ID and AppID (#1165)
- Re: [webauthn] Add example of different RP ID and AppID (#1165)
- Re: [webauthn] Extensible data structure for Authenticator Data (#1220)
- [w3c/webauthn] a978c7: mark various citation occurances as normative
- [webauthn] new commits pushed by equalsJeffH
- Re: [webauthn] WebAuthn available to Workers? aka "silent authentication" (#199)
- Re: [webauthn] Add example of different RP ID and AppID (#1165)
Tuesday, 11 June 2019
- Re: [webauthn] Extensible data structure for Authenticator Data (#1220)
- 06/12/2019 W3C Web Authentication WG Meeting Agenda
- [w3c/webauthn] fb0e20: Add rewordings proposed by @equalsJeffH
- [webauthn] new commits pushed by emlun
- Re: [webauthn] Browser capability detection. (#1219)
- [w3c/webauthn] f28cf3: Built by Travis-CI: f404f3a377373ad8ee8da1755b5fc0...
- [w3c/webauthn] 8018d7: Built by Travis-CI: f404f3a377373ad8ee8da1755b5fc0...
- [webauthn] new commits pushed by WebAuthnBot
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn]
- [w3c/webauthn] af676c: Remove unused <dfn>s from Table 2 in Authenticator...
- [webauthn] Merged Pull Request: Clean up Bikeshed warnings
- [webauthn] new commits pushed by emlun
- Closed: [webauthn] Clean up Bikeshed warnings (#1224)
- Re: [webauthn] export definitions? (#1049)
- [webauthn] correctly refer to FIDO JavaScript APIs spec (#1233)
Monday, 10 June 2019
- [webauthn] new commits pushed by emlun
- [w3c/webauthn] fb9337: Fix sentence-initial-word case
- Re: [webauthn] Poor documentation of how authnr aspects (platform, UV, RK) interact (#1231)
- Re: [webauthn] Browser capability detection. (#1219)
Sunday, 9 June 2019
- [w3c/webauthn] 186cb5: export data-lt='webauthn-feature'
- [webauthn] new commits pushed by equalsJeffH
- Re: [webauthn] Clean up Bikeshed warnings (#1225)
- [w3c/webauthn] 49578a: fix 'browsing context' and 'feature policy' dfn links
- [webauthn] new commits pushed by equalsJeffH
Friday, 7 June 2019
- Re: [webauthn] Pass through other assertion formats (#1232)
- Re: [webauthn] Consider allowing RPs to indicate that they want platform authenticators to be synced across devices (#969)
- [w3c/webauthn] 2b5027: Built by Travis-CI: bf594e144dcbd53dfa7cfba9326e8f...
- [w3c/webauthn] e68e2d: Built by Travis-CI: bf594e144dcbd53dfa7cfba9326e8f...
- [webauthn] new commits pushed by WebAuthnBot
- [webauthn] new commits pushed by WebAuthnBot
- [w3c/webauthn]
- [w3c/webauthn] e6cb7b: Elaborate that a [=credential private key=] should...
- [webauthn] new commits pushed by emlun
- [webauthn] Merged Pull Request: Polish definitions of credential key pair, private/public key
- Closed: [webauthn] spec is missing baseline posture that credential source is bound to a particular authenticator (#1122)
- [w3c/webauthn] 152580: Address review comments by @equalsJeffH
- [webauthn] new commits pushed by emlun
Thursday, 6 June 2019
- Re: [webauthn] Browser capability detection. (#1219)
- Re: [webauthn] Browser capability detection. (#1219)
Wednesday, 5 June 2019
- Re: [webauthn] Pass through other assertion formats (#1232)
- Re: [webauthn] Pass through other assertion formats (#1232)
- 06/05/2019 W3C Web Authentication WG Meeting Agenda
- Re: [webauthn] Polish definitions of credential key pair, private/public key (#1226)
- [webauthn] Pull Request: Pass through other assertion formats
- [w3c/webauthn] 3981b6: added reference to UAF
- [webauthn] new commits pushed by rlin1
- [w3c/webauthn] 175d9f: Clarify user identification in RP assertion verifi...
- [webauthn] new commits pushed by rlin1
Tuesday, 4 June 2019
- Call for Exclusions: Web Authentication:An API for accessing Public Key Credentials Level 2
- [webauthn] Poor documentation of how authnr aspects (platform, UV, RK) interact (#1231)
- Re: [webauthn] Add guidance on using U2F key handles with appid extension (#1230)
- [webauthn] Pull Request: Add guidance on using U2F key handles with appid extension
- [w3c/webauthn] 8a4e92: Draft improved guidance for using appid extension
- [webauthn] new commits pushed by emlun
- WebAuthn Level 2 WD01 published
- Re: [webauthn] Document that U2F key handle = credential ID (#1229)
- [webauthn] Document that U2F key handle = credential ID (#1229)
- [w3c/webauthn]
Monday, 3 June 2019
- FYI: thread on migrating to WebAuthn from U2F
- [webauthn] Closed Pull Request: Add Rec to previous version
- Re: [webauthn] Add Rec to previous version (#1227)
- [w3c/webauthn] 5134fa: Add alt text
- [webauthn] new commits pushed by wseltzer
- [webauthn] Merged Pull Request: Add alt text
- [webauthn] Pull Request: Add alt text
- [w3c/webauthn] 5134fa: Add alt text
- [webauthn] new commits pushed by wseltzer
- [webauthn] Pull Request: Add Rec to previous version
- [w3c/webauthn] 4eb141: Add Rec to previous version
- [webauthn] new commits pushed by wseltzer