- From: =JeffH <noreply@github.com>
- Date: Mon, 28 Oct 2019 11:53:58 -0700
- To: public-webauthn@w3.org
Branch: refs/heads/jeffh-polish-feature-policy-handling Home: https://github.com/w3c/webauthn Commit: 4304ea2474e67fae8c937286f5f228923d93fd8f https://github.com/w3c/webauthn/commit/4304ea2474e67fae8c937286f5f228923d93fd8f Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-06-17 (Mon, 17 Jun 2019) Changed paths: M index.bs Log Message: ----------- Automation: AddVirtualAuthenticator Commit: efc5abb67d71e6b4f88f744a9bd1c35be0e7caaf https://github.com/w3c/webauthn/commit/efc5abb67d71e6b4f88f744a9bd1c35be0e7caaf Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-06-17 (Mon, 17 Jun 2019) Changed paths: M index.bs Log Message: ----------- Automation: RemoveVirtualAuthenticator. Commit: 958cba904709075b9909cab3f12aa7f3cec4ca2c https://github.com/w3c/webauthn/commit/958cba904709075b9909cab3f12aa7f3cec4ca2c Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-06-17 (Mon, 17 Jun 2019) Changed paths: M index.bs Log Message: ----------- Automation: AddCredential Commit: 5bce333990d9e72d65d079baecc7e9568f83de71 https://github.com/w3c/webauthn/commit/5bce333990d9e72d65d079baecc7e9568f83de71 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-06-18 (Tue, 18 Jun 2019) Changed paths: M index.bs Log Message: ----------- More Automation commands. Commit: 71f92c5dd3915ef37d47c1016d7bc35079e51125 https://github.com/w3c/webauthn/commit/71f92c5dd3915ef37d47c1016d7bc35079e51125 Author: Emil Lundberg <emil@yubico.com> Date: 2019-07-01 (Mon, 01 Jul 2019) Changed paths: M index.bs Log Message: ----------- Propose second-factor use case as mitigation for username enumeration Commit: 548dd54a33b39ee9ec55367cad1909f68ee60544 https://github.com/w3c/webauthn/commit/548dd54a33b39ee9ec55367cad1909f68ee60544 Author: Emil Lundberg <emil@yubico.com> Date: 2019-07-01 (Mon, 01 Jul 2019) Changed paths: M index.bs Log Message: ----------- Add privacy consideration about PII leak via credential IDs Commit: edb93f701edf78f588ad18c321af47123fe0edb6 https://github.com/w3c/webauthn/commit/edb93f701edf78f588ad18c321af47123fe0edb6 Author: Emil Lundberg <emil@yubico.com> Date: 2019-07-03 (Wed, 03 Jul 2019) Changed paths: M index.bs Log Message: ----------- Rewrite Authenticator Taxonomy introduction Start with some example use cases, and expand on what distinguishes the most interesting use cases from the less interesting ones. Commit: 63575b2451216ff0e3890c5bdfe6d4be49c9d58c https://github.com/w3c/webauthn/commit/63575b2451216ff0e3890c5bdfe6d4be49c9d58c Author: Emil Lundberg <emil@yubico.com> Date: 2019-07-03 (Wed, 03 Jul 2019) Changed paths: M index.bs Log Message: ----------- Change "roam among" to "roam between" Commit: 1e9cc109807a56e4d3dc45afbb9ad244e1cc3b9d https://github.com/w3c/webauthn/commit/1e9cc109807a56e4d3dc45afbb9ad244e1cc3b9d Author: Emil Lundberg <emil@yubico.com> Date: 2019-07-03 (Wed, 03 Jul 2019) Changed paths: M index.bs Log Message: ----------- Clarify platform-authnr-as-roaming description Commit: 2e7e3b8b62c7ec04a5af5d7c960978aeb71c63e3 https://github.com/w3c/webauthn/commit/2e7e3b8b62c7ec04a5af5d7c960978aeb71c63e3 Author: Emil Lundberg <emil@yubico.com> Date: 2019-07-03 (Wed, 03 Jul 2019) Changed paths: M index.bs Log Message: ----------- Spell out references to single/multi-factor capable To disambiguate from "[=single-factor=] authentication" and "[=multi-factor=] authentication". Commit: dfb388c10fac3395697047abecd1a458eeaf841c https://github.com/w3c/webauthn/commit/dfb388c10fac3395697047abecd1a458eeaf841c Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-03 (Wed, 03 Jul 2019) Changed paths: M index.bs Log Message: ----------- Remove attachment from API. Commit: b106725f31bd1772deae5716c91e2e857337debc https://github.com/w3c/webauthn/commit/b106725f31bd1772deae5716c91e2e857337debc Author: JeffH <jdhodges@google.com> Date: 2019-07-04 (Thu, 04 Jul 2019) Changed paths: M index.bs Log Message: ----------- merge from master and fix conflict Commit: 2975d59592887968a3e283d685facdc634c27943 https://github.com/w3c/webauthn/commit/2975d59592887968a3e283d685facdc634c27943 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-05 (Fri, 05 Jul 2019) Changed paths: M index.bs Log Message: ----------- Replace <a></a> with [==] Commit: f908922f36319ce825074644082085b793f90500 https://github.com/w3c/webauthn/commit/f908922f36319ce825074644082085b793f90500 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-05 (Fri, 05 Jul 2019) Changed paths: M index.bs Log Message: ----------- Use correct syntax for authenticator ID URI param. Commit: a5062cd7a8fda22bbd82909223bfe126ab71e10f https://github.com/w3c/webauthn/commit/a5062cd7a8fda22bbd82909223bfe126ab71e10f Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-08 (Mon, 08 Jul 2019) Changed paths: M index.bs Log Message: ----------- Apply suggestions from code review Commit the editorial suggestions Co-Authored-By: =JeffH <jdhodges@google.com> Commit: cd4222cb5386190aaedc54df7b5781dea842c6a5 https://github.com/w3c/webauthn/commit/cd4222cb5386190aaedc54df7b5781dea842c6a5 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-08 (Mon, 08 Jul 2019) Changed paths: M index.bs Log Message: ----------- Add missing suggestion. Commit: 29fc9279f013f856f6f7ca70612c6ad62980e2ea https://github.com/w3c/webauthn/commit/29fc9279f013f856f6f7ca70612c6ad62980e2ea Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-08 (Mon, 08 Jul 2019) Changed paths: M index.bs Log Message: ----------- Add isUserPresent Commit: 8077ee6e0b7ae841c9fd3efa8ba2e1f5ed51e965 https://github.com/w3c/webauthn/commit/8077ee6e0b7ae841c9fd3efa8ba2e1f5ed51e965 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-08 (Mon, 08 Jul 2019) Changed paths: M index.bs Log Message: ----------- Constrain authenticatorId format. Commit: 73d69037d67fd8a92c870e5f0094b316424bddb0 https://github.com/w3c/webauthn/commit/73d69037d67fd8a92c870e5f0094b316424bddb0 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-08 (Mon, 08 Jul 2019) Changed paths: M index.bs Log Message: ----------- Add missing ` Commit: 43213e1c4a319bb37f1276b0b26d4df131c82d6e https://github.com/w3c/webauthn/commit/43213e1c4a319bb37f1276b0b26d4df131c82d6e Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-08 (Mon, 08 Jul 2019) Changed paths: M index.bs Log Message: ----------- Use a table instead of WebIDL for addVirtualAuthenticator. Commit: f69855eab79defa7cbe50de8658bfe263e39928e https://github.com/w3c/webauthn/commit/f69855eab79defa7cbe50de8658bfe263e39928e Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-08 (Mon, 08 Jul 2019) Changed paths: M index.bs Log Message: ----------- Move authenticatorId definition. Commit: 7d2d8198b468de7bdfea83db0a83d56ce765dda7 https://github.com/w3c/webauthn/commit/7d2d8198b468de7bdfea83db0a83d56ce765dda7 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-08 (Mon, 08 Jul 2019) Changed paths: M index.bs Log Message: ----------- Trim down definitions. Commit: 5120d507b5689ae18463023eac96fbcb390dfdb3 https://github.com/w3c/webauthn/commit/5120d507b5689ae18463023eac96fbcb390dfdb3 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-08 (Mon, 08 Jul 2019) Changed paths: M index.bs Log Message: ----------- Apply suggestions from code review Apply trivial changes Co-Authored-By: =JeffH <jdhodges@google.com> Commit: cd26692446bd8c95a1d3087153a63ffa1476e134 https://github.com/w3c/webauthn/commit/cd26692446bd8c95a1d3087153a63ffa1476e134 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-09 (Tue, 09 Jul 2019) Changed paths: M index.bs Log Message: ----------- Fix up addVirtualAuthenticator. Commit: 7496558c652134d7131c64bef48e27bc68bc68c7 https://github.com/w3c/webauthn/commit/7496558c652134d7131c64bef48e27bc68bc68c7 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-09 (Tue, 09 Jul 2019) Changed paths: M index.bs Log Message: ----------- Fix up AddCredential. Commit: 2fcc447d90e31eb878fd092ede19054cc9764a5c https://github.com/w3c/webauthn/commit/2fcc447d90e31eb878fd092ede19054cc9764a5c Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-09 (Tue, 09 Jul 2019) Changed paths: M index.bs Log Message: ----------- Several misc fixes. Commit: 91cf85d0b30ed76e2a7236a9841e9b80ad22495c https://github.com/w3c/webauthn/commit/91cf85d0b30ed76e2a7236a9841e9b80ad22495c Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-09 (Tue, 09 Jul 2019) Changed paths: M index.bs Log Message: ----------- Fix typo. Commit: c146c89f91e28175e61f8b8ff8f452ad1c262672 https://github.com/w3c/webauthn/commit/c146c89f91e28175e61f8b8ff8f452ad1c262672 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-09 (Tue, 09 Jul 2019) Changed paths: M index.bs Log Message: ----------- Add removeCredential and rename removeCredentials Commit: 107f33fe09fd231044f2143af50f0d31e70459af https://github.com/w3c/webauthn/commit/107f33fe09fd231044f2143af50f0d31e70459af Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-09 (Tue, 09 Jul 2019) Changed paths: M index.bs Log Message: ----------- touch up authenticatorId definition. Commit: ceea5a8950d9687ab2106a46bfce428ce71b48e5 https://github.com/w3c/webauthn/commit/ceea5a8950d9687ab2106a46bfce428ce71b48e5 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-09 (Tue, 09 Jul 2019) Changed paths: M index.bs Log Message: ----------- Address comments. Commit: 6862588682084265216e556f080fd1c869f01fbf https://github.com/w3c/webauthn/commit/6862588682084265216e556f080fd1c869f01fbf Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-10 (Wed, 10 Jul 2019) Changed paths: M index.bs Log Message: ----------- Remove UUID recommendation. Commit: 49775710ce56885ca610a99937ea4b7e791eaa71 https://github.com/w3c/webauthn/commit/49775710ce56885ca610a99937ea4b7e791eaa71 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-11 (Thu, 11 Jul 2019) Changed paths: M index.bs Log Message: ----------- Change isUserPresent to isUserConsenting. Commit: 04715da2a5677d638c21d1eebb27762b3c583678 https://github.com/w3c/webauthn/commit/04715da2a5677d638c21d1eebb27762b3c583678 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-11 (Thu, 11 Jul 2019) Changed paths: M index.bs Log Message: ----------- Add description to credentialParameters table. Also fix virtual authenticator `credential` still being refered as key pair instead of public key credential source. Commit: cf614d48b38f620b4f3775723178457702eededb https://github.com/w3c/webauthn/commit/cf614d48b38f620b4f3775723178457702eededb Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-11 (Thu, 11 Jul 2019) Changed paths: M index.bs Log Message: ----------- Encode private key using COSE instead. Commit: 6f10346c40ff8b59d223ffcae6f0f657cffe9d91 https://github.com/w3c/webauthn/commit/6f10346c40ff8b59d223ffcae6f0f657cffe9d91 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-11 (Thu, 11 Jul 2019) Changed paths: M index.bs Log Message: ----------- Add userHandle. Commit: c3a08a4028e3498328f434b9003ffab1d89c72d7 https://github.com/w3c/webauthn/commit/c3a08a4028e3498328f434b9003ffab1d89c72d7 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-12 (Fri, 12 Jul 2019) Changed paths: M index.bs Log Message: ----------- nit. Commit: d2676eef3961eb1757714a0be184dad0b8fb2816 https://github.com/w3c/webauthn/commit/d2676eef3961eb1757714a0be184dad0b8fb2816 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-22 (Mon, 22 Jul 2019) Changed paths: M index.bs Log Message: ----------- nit Commit: e826609d225d2824317a507523af9f028097f162 https://github.com/w3c/webauthn/commit/e826609d225d2824317a507523af9f028097f162 Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-30 (Tue, 30 Jul 2019) Changed paths: M index.bs Log Message: ----------- Revert "Encode private key using COSE instead." This reverts commit cf614d48b38f620b4f3775723178457702eededb. Commit: 263a57b7cbbdbe3cec69e68e5ec0183b2d6f7c9a https://github.com/w3c/webauthn/commit/263a57b7cbbdbe3cec69e68e5ec0183b2d6f7c9a Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-30 (Tue, 30 Jul 2019) Changed paths: M index.bs Log Message: ----------- Add |isResidentCredential| to AddCredential. Commit: 7271e6cd2436d4cb1d871427101fbd62056f563d https://github.com/w3c/webauthn/commit/7271e6cd2436d4cb1d871427101fbd62056f563d Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-30 (Tue, 30 Jul 2019) Changed paths: M index.bs Log Message: ----------- Add check for resident credential. Commit: dc417dd4b533f9464d58b9f86ed70d357252c2de https://github.com/w3c/webauthn/commit/dc417dd4b533f9464d58b9f86ed70d357252c2de Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-30 (Tue, 30 Jul 2019) Changed paths: M index.bs Log Message: ----------- Constrain the pk to ECDSA P-256 Commit: 9be5c172ba700b6d24d20ff4f438ea7e8031171e https://github.com/w3c/webauthn/commit/9be5c172ba700b6d24d20ff4f438ea7e8031171e Author: Nina Satragno <nsatragno@gmail.com> Date: 2019-07-30 (Tue, 30 Jul 2019) Changed paths: M index.bs Log Message: ----------- Return an error if userHandle is null and is resident key. Commit: 89bf1c174fdb87e560ab624442d0daa3ece9af7c https://github.com/w3c/webauthn/commit/89bf1c174fdb87e560ab624442d0daa3ece9af7c Author: Emil Lundberg <emil@yubico.com> Date: 2019-08-07 (Wed, 07 Aug 2019) Changed paths: M index.bs Log Message: ----------- Merge branch 'master' into issue-1231-improve-authenticator-taxonomy Commit: 2a50293d3d79e718606def99b2776b8c6bbdb15e https://github.com/w3c/webauthn/commit/2a50293d3d79e718606def99b2776b8c6bbdb15e Author: Adam Langley <agl@imperialviolet.org> Date: 2019-08-21 (Wed, 21 Aug 2019) Changed paths: M index.bs Log Message: ----------- Add note about decoding U2F keyhandles. (#1272) * Add note about decoding U2F keyhandles. U2F key handles need to be base64url decoded before being used as ArrayBuffers in WebAuthn calls. This isn't completely obvious so this change adds a clarification to the appid and appidExclude extensions. * Address Jeff's comments by linking to [=base64url encoding=] Commit: ea9d4a8d180f49e7ba213f273a7a89d53866de1e https://github.com/w3c/webauthn/commit/ea9d4a8d180f49e7ba213f273a7a89d53866de1e Author: =JeffH <jdhodges@google.com> Date: 2019-08-21 (Wed, 21 Aug 2019) Changed paths: M images/fido-attestation-structures.svg Log Message: ----------- updated attstation object figure for proper CBOR key ordering (#1278) Commit: 0cc6d70009cd6c481cedd46bed5d6c63da0caabe https://github.com/w3c/webauthn/commit/0cc6d70009cd6c481cedd46bed5d6c63da0caabe Author: Adam Langley <agl@imperialviolet.org> Date: 2019-08-21 (Wed, 21 Aug 2019) Changed paths: M index.bs Log Message: ----------- Clarify the U2F attestation verification. (#1280) Fixes #1279. Commit: 6ca8bed43a405f67fcf9c2808edead1e6dab3b1b https://github.com/w3c/webauthn/commit/6ca8bed43a405f67fcf9c2808edead1e6dab3b1b Author: Emil Lundberg <emil@yubico.com> Date: 2019-08-27 (Tue, 27 Aug 2019) Changed paths: M index.bs Log Message: ----------- Add RP ops step of storing new credential counter Commit: b75aef303aef18aeb0700740dfa4e4c0fa75eda7 https://github.com/w3c/webauthn/commit/b75aef303aef18aeb0700740dfa4e4c0fa75eda7 Author: Adam Langley <agl@imperialviolet.org> Date: 2019-08-28 (Wed, 28 Aug 2019) Changed paths: M index.bs Log Message: ----------- Fix #1268 Type transport strings as DOMStrings. (#1275) * Type transport strings as DOMStrings. Currently transports are represented as an enum. However, WebIDL has strict enums. (I.e. an RP which sent an unrecognised transport would make the whole structure unparsable.) This means that every time we add a transport, we break all existing browsers. In order to address this, this change retypes transports as plain DOMStrings. The AuthenticatorTransport enum still exists, but now only as documentation and registry — not as a factor in type-checking. * Address Emil's comment Fixes #1268. * Address Jeff's comments. Commit: 30d3e9f0d2b11116626cd13735857bb3c0f6b797 https://github.com/w3c/webauthn/commit/30d3e9f0d2b11116626cd13735857bb3c0f6b797 Author: John Bradley <ve7jtb@ve7jtb.com> Date: 2019-08-28 (Wed, 28 Aug 2019) Changed paths: M index.bs Log Message: ----------- Add lightning transport (#1264) * Update index.bs Add lightning transport Fixes #1261 * Update index.bs Fix missing comma Commit: fcce61146bd0ada2344dabb8a0b519fd5c999714 https://github.com/w3c/webauthn/commit/fcce61146bd0ada2344dabb8a0b519fd5c999714 Author: Shane Weeden <sweeden@au1.ibm.com> Date: 2019-08-29 (Thu, 29 Aug 2019) Changed paths: M index.bs Log Message: ----------- Initial proposal to address #1287 by relaxing the requirement for RP's to reject responses containing unsolicited extensions. Commit: 7d255653d26bb8deeb8b39b268a682b30ae3e121 https://github.com/w3c/webauthn/commit/7d255653d26bb8deeb8b39b268a682b30ae3e121 Author: Emil Lundberg <emil@yubico.com> Date: 2019-09-04 (Wed, 04 Sep 2019) Changed paths: M index.bs Log Message: ----------- Address some of @equalsJeffH's review comments Commit: aded02035e6e63fc58f7508c21e70079b72fb0d2 https://github.com/w3c/webauthn/commit/aded02035e6e63fc58f7508c21e70079b72fb0d2 Author: Emil Lundberg <emil@yubico.com> Date: 2019-09-04 (Wed, 04 Sep 2019) Changed paths: M index.bs Log Message: ----------- Merge pull request #1270 from w3c/issue-1231-improve-authenticator-taxonomy Improve authenticator taxonomy section Commit: 97e659db6621dced069e4263ced5c97cfeaeca46 https://github.com/w3c/webauthn/commit/97e659db6621dced069e4263ced5c97cfeaeca46 Author: =JeffH <jdhodges@google.com> Date: 2019-09-04 (Wed, 04 Sep 2019) Changed paths: M index.bs Log Message: ----------- fix #1277: webauthn -> publickey-credentials (#1284) Commit: 8667dbe39baceb09baea3bf6bd467752bfc35cf9 https://github.com/w3c/webauthn/commit/8667dbe39baceb09baea3bf6bd467752bfc35cf9 Author: Emil Lundberg <emil@yubico.com> Date: 2019-09-04 (Wed, 04 Sep 2019) Changed paths: M index.bs Log Message: ----------- Merge pull request #1288 from w3c/issue-1282-rp-initialize-sigcount Add RP ops step of storing new credential counter Commit: f4d2ed42141c29f1681af6f170c3b10e666bb278 https://github.com/w3c/webauthn/commit/f4d2ed42141c29f1681af6f170c3b10e666bb278 Author: Shane Weeden <sweeden@au1.ibm.com> Date: 2019-09-05 (Thu, 05 Sep 2019) Changed paths: M index.bs Log Message: ----------- Added additional note further clarifying why unsolicited extensions may be present, and how the RP might deal with such a situation. Commit: 8f5d7bd7672b91f0e3981bab6f81eab470a00392 https://github.com/w3c/webauthn/commit/8f5d7bd7672b91f0e3981bab6f81eab470a00392 Author: Shane Weeden <sbweeden@users.noreply.github.com> Date: 2019-09-06 (Fri, 06 Sep 2019) Changed paths: M index.bs Log Message: ----------- Update index.bs Co-Authored-By: Emil Lundberg <emil@emlun.se> Commit: 64a4d2a6723fba6e309a1a709b307c77f7b90ed6 https://github.com/w3c/webauthn/commit/64a4d2a6723fba6e309a1a709b307c77f7b90ed6 Author: Shane Weeden <sbweeden@users.noreply.github.com> Date: 2019-09-06 (Fri, 06 Sep 2019) Changed paths: M index.bs Log Message: ----------- Update index.bs Co-Authored-By: Emil Lundberg <emil@emlun.se> Commit: dc0378b9dd1aa142296ee25021e3b511e5b078c0 https://github.com/w3c/webauthn/commit/dc0378b9dd1aa142296ee25021e3b511e5b078c0 Author: Shane Weeden <sweeden@au1.ibm.com> Date: 2019-09-06 (Fri, 06 Sep 2019) Changed paths: M index.bs Log Message: ----------- Incorporate feedback from @emlun Commit: 4b3638814bd9cb1dc7e575f8d6094d52d3e3ed56 https://github.com/w3c/webauthn/commit/4b3638814bd9cb1dc7e575f8d6094d52d3e3ed56 Author: Robert Linder <26493779+Malvoz@users.noreply.github.com> Date: 2019-09-09 (Mon, 09 Sep 2019) Changed paths: M index.bs Log Message: ----------- (Deja vu) webauthn => publickey-credentials (#1295) Commit: 24ecf51e2d7ebd53f189e5f00a5d743a7a9a374d https://github.com/w3c/webauthn/commit/24ecf51e2d7ebd53f189e5f00a5d743a7a9a374d Author: Emil Lundberg <emil@yubico.com> Date: 2019-09-11 (Wed, 11 Sep 2019) Changed paths: M index.bs Log Message: ----------- Formalise beginning of RP ops Commit: 578124356dc1cf7097f6df78d65ea2043eefea15 https://github.com/w3c/webauthn/commit/578124356dc1cf7097f6df78d65ea2043eefea15 Author: Emil Lundberg <emil@yubico.com> Date: 2019-09-11 (Wed, 11 Sep 2019) Changed paths: M index.bs Log Message: ----------- Recommend RPs to store transport hints Commit: f599d9beb3f1be842af6ec27948b052d4d331441 https://github.com/w3c/webauthn/commit/f599d9beb3f1be842af6ec27948b052d4d331441 Author: Emil Lundberg <emil@yubico.com> Date: 2019-09-11 (Wed, 11 Sep 2019) Changed paths: M index.bs Log Message: ----------- Mention getTransports() in PublicKeyCredentialDescriptor definition Commit: 5f3f9885deee9932268dee02539f8bd0e93bdcd1 https://github.com/w3c/webauthn/commit/5f3f9885deee9932268dee02539f8bd0e93bdcd1 Author: Emil Lundberg <emil@yubico.com> Date: 2019-09-11 (Wed, 11 Sep 2019) Changed paths: M index.bs Log Message: ----------- Address @equalsJeffH's review comments Commit: 32c216ce37122d9499ebdebc660d0ba77e3dcfe2 https://github.com/w3c/webauthn/commit/32c216ce37122d9499ebdebc660d0ba77e3dcfe2 Author: Anthony Nadalin <7937635+nadalin@users.noreply.github.com> Date: 2019-09-11 (Wed, 11 Sep 2019) Changed paths: M index.bs Log Message: ----------- Merge pull request #1289 from sbweeden/sbweeden_issue_1287 Initial proposal to fix #1287 Commit: 8ed793fa733bb50481ff5dd791e9f7b6da548054 https://github.com/w3c/webauthn/commit/8ed793fa733bb50481ff5dd791e9f7b6da548054 Author: Emil Lundberg <emil@yubico.com> Date: 2019-09-19 (Thu, 19 Sep 2019) Changed paths: M index.bs Log Message: ----------- Divide security/privacy considerations into subsections by audience (#1298) * Divide security/privacy considerations into subsections by audience Fixes https://github.com/w3c/webauthn/issues/1039 * Add editor comment about <span> for old anchor * Move RP security consideration out from authenticators section Commit: 2b435a77f7ab5968e1713accaf5a76547eb9fa5f https://github.com/w3c/webauthn/commit/2b435a77f7ab5968e1713accaf5a76547eb9fa5f Author: =JeffH <jdhodges@google.com> Date: 2019-09-19 (Thu, 19 Sep 2019) Changed paths: M index.bs Log Message: ----------- fix publickey-credentials feature identifier tag (#1301) Commit: 976391dcba2bd7af6ea204e1a24ef8eb91713bf3 https://github.com/w3c/webauthn/commit/976391dcba2bd7af6ea204e1a24ef8eb91713bf3 Author: Adam Langley <agl@imperialviolet.org> Date: 2019-10-02 (Wed, 02 Oct 2019) Changed paths: M index.bs Log Message: ----------- Merge pull request #1256 from nsatragno/automation Add a WebDriver Virtual Authenticator extension Commit: 4d16a31c38d977da3b2f47ff3de31378f7f96d7d https://github.com/w3c/webauthn/commit/4d16a31c38d977da3b2f47ff3de31378f7f96d7d Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-07 (Mon, 07 Oct 2019) Changed paths: M index.bs Log Message: ----------- Clarify that RP is split into server and script Commit: cd52169c863c0537cf35cbc8c75959b10c3f6344 https://github.com/w3c/webauthn/commit/cd52169c863c0537cf35cbc8c75959b10c3f6344 Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-07 (Mon, 07 Oct 2019) Changed paths: M index.bs Log Message: ----------- Remove note about UV verifying the same user in get() as in create() Commit: 7ec1c1d9d479eec2e13b59352d4e466068407b99 https://github.com/w3c/webauthn/commit/7ec1c1d9d479eec2e13b59352d4e466068407b99 Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-07 (Mon, 07 Oct 2019) Changed paths: M index.bs Log Message: ----------- Clarify assumptions about single-user authenticators and relation to UV Commit: 00114e9c213e207e82734abebb5d6430a3405031 https://github.com/w3c/webauthn/commit/00114e9c213e207e82734abebb5d6430a3405031 Author: =JeffH <jdhodges@google.com> Date: 2019-10-09 (Wed, 09 Oct 2019) Changed paths: M index.bs Log Message: ----------- ack Nina (automation/webdriver) (#1310) * ack Nina (automation/webdriver) * re-alphabetize 'Contributors' Commit: c7e44f6f91632b9847394d61ed3d6ba8fb2128d4 https://github.com/w3c/webauthn/commit/c7e44f6f91632b9847394d61ed3d6ba8fb2128d4 Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-09 (Wed, 09 Oct 2019) Changed paths: M index.bs Log Message: ----------- Add privacy considerations about credential IDs (#1250) * Apply suggestions from code review Co-Authored-By: =JeffH <jdhodges@google.com> * Fix whitespace * Suggest session cookie as mitigation * Fix pluralisation * Add note of identifying authenticator owner from credential IDs * Address @manger's comment about 'single-factor' * Make reason for credID privacy leak more precise and general * Focus privacy leak more on second-factor than non-resident keys Commit: 72e2f471f178f1f6298348a98a5bbc0eb1e9788c https://github.com/w3c/webauthn/commit/72e2f471f178f1f6298348a98a5bbc0eb1e9788c Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-09 (Wed, 09 Oct 2019) Changed paths: M index.bs Log Message: ----------- Merge pull request #1299 from w3c/issue-1188-rp-transports Recommend RPs to store transport hints Commit: 2773c49a96fd14552bdc467f67afc316b96366fd https://github.com/w3c/webauthn/commit/2773c49a96fd14552bdc467f67afc316b96366fd Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-09 (Wed, 09 Oct 2019) Changed paths: M index.bs Log Message: ----------- Merge pull request #1312 from w3c/issue-1309-clarify-rp-server Clarify that RP is split into server and script Commit: 36fe4ed877385293b883d49a2fda2eb8f69bec6c https://github.com/w3c/webauthn/commit/36fe4ed877385293b883d49a2fda2eb8f69bec6c Author: Mike Jones <Michael.Jones@microsoft.com> Date: 2019-10-09 (Wed, 09 Oct 2019) Changed paths: M index.bs Log Message: ----------- Add note about use of floating point in extensions passed through that clients do not recognize (#1307) * Add note about use of floating point in extensions passed through that clients do not recognize * Incorporate feedback on the PR from Jeff Hodges Commit: 101146b9f9bf1b1fcb2c01768321ceac2c5ef1e9 https://github.com/w3c/webauthn/commit/101146b9f9bf1b1fcb2c01768321ceac2c5ef1e9 Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-14 (Mon, 14 Oct 2019) Changed paths: M index.bs Log Message: ----------- Incorporate suggestion by @FabianHenneke Commit: 562cafb89d9bc93478a07de1c8f514f0ce988372 https://github.com/w3c/webauthn/commit/562cafb89d9bc93478a07de1c8f514f0ce988372 Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-17 (Thu, 17 Oct 2019) Changed paths: M index.bs Log Message: ----------- Update CDDL reference Commit: 10cc310bd8df741c1d4f467f15758fd86a2291be https://github.com/w3c/webauthn/commit/10cc310bd8df741c1d4f467f15758fd86a2291be Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-17 (Thu, 17 Oct 2019) Changed paths: M index.bs Log Message: ----------- Enhance spec roadmap section Commit: f67c44ba9ea391622c6c7903e61b737720e6336c https://github.com/w3c/webauthn/commit/f67c44ba9ea391622c6c7903e61b737720e6336c Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-17 (Thu, 17 Oct 2019) Changed paths: M index.bs Log Message: ----------- Link to security/privacy considerations in spec roadmap Commit: 6b03c655991eadcdc6f13de46dde29de9a5ffbfb https://github.com/w3c/webauthn/commit/6b03c655991eadcdc6f13de46dde29de9a5ffbfb Author: =JeffH <jdhodges@google.com> Date: 2019-10-17 (Thu, 17 Oct 2019) Changed paths: M draft-hodges-webauthn-registries.html M draft-hodges-webauthn-registries.txt M draft-hodges-webauthn-registries.xml Log Message: ----------- revise draft-hodges-webauthn-registries per AD review and initiate work on rev -03 (#1322) * begin addressing AD comments * update rendered .txt & .html to match .xml: these all are -03a (further commits to follow) * editorial: fixup line-ending char, indentation, some section anchors Commit: b5c400104b3fb9c8eaac5cbea634741d320a009e https://github.com/w3c/webauthn/commit/b5c400104b3fb9c8eaac5cbea634741d320a009e Author: Akshay Kumar <akshayku@microsoft.com> Date: 2019-10-17 (Thu, 17 Oct 2019) Changed paths: M index.bs Log Message: ----------- Timeout considerations (#1317) * TimeoutSuggestions * Seconds to Milliseconds Commit: 35c25de126b7c3bc639c7efd1c7d4ea8ee3dd1cc https://github.com/w3c/webauthn/commit/35c25de126b7c3bc639c7efd1c7d4ea8ee3dd1cc Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-18 (Fri, 18 Oct 2019) Changed paths: M index.bs Log Message: ----------- Add batch attestation as alias of basic attestation Commit: 50a22e4bb3730c1e83f2503c52511eaedffb2a0e https://github.com/w3c/webauthn/commit/50a22e4bb3730c1e83f2503c52511eaedffb2a0e Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-18 (Fri, 18 Oct 2019) Changed paths: M index.bs Log Message: ----------- Add explanatory note to step 3 in authenticatorMakeCredential Commit: 243d8f7598a425e99b4a2b7e699372e9fefbb672 https://github.com/w3c/webauthn/commit/243d8f7598a425e99b4a2b7e699372e9fefbb672 Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-18 (Fri, 18 Oct 2019) Changed paths: M index.bs Log Message: ----------- Explicitly mention running over TLS in WebAuthn API intro Commit: a55edbf89206dc329d160abf7e9eb67e8303e030 https://github.com/w3c/webauthn/commit/a55edbf89206dc329d160abf7e9eb67e8303e030 Author: =JeffH <jdhodges@google.com> Date: 2019-10-18 (Fri, 18 Oct 2019) Changed paths: M draft-hodges-webauthn-registries.html M draft-hodges-webauthn-registries.txt M draft-hodges-webauthn-registries.xml M index.bs Log Message: ----------- Align with RFC8288, update .txt & .html to be actual rendered versions of .xml (#1329) * begin addressing AD comments * update rendered .txt & .html to match .xml: these all are -03a (further commits to follow) * editorial: fixup line-ending char, indentation, some section anchors * Align with RFC8288, rather than draft-nottingham-rfc5988bis. -03 release candidate * update .txt .html to be actual rendered versions of .xml * fix error in .xml, update .html & .txt to match .xml Commit: b58f3a308be5d26e7401ca7813da2ccfebd17d47 https://github.com/w3c/webauthn/commit/b58f3a308be5d26e7401ca7813da2ccfebd17d47 Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-21 (Mon, 21 Oct 2019) Changed paths: M index.bs Log Message: ----------- Add definition link to "bound" term Commit: a1d4e065943ad6541475279907fae35ecd6554e7 https://github.com/w3c/webauthn/commit/a1d4e065943ad6541475279907fae35ecd6554e7 Author: =JeffH <jdhodges@google.com> Date: 2019-10-21 (Mon, 21 Oct 2019) Changed paths: M index.bs Log Message: ----------- feature policy integ: add link to (#1328) Commit: 831fca24174e1be656696d2f699eaedc075600f5 https://github.com/w3c/webauthn/commit/831fca24174e1be656696d2f699eaedc075600f5 Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-23 (Wed, 23 Oct 2019) Changed paths: M index.bs Log Message: ----------- Merge pull request #1320 from w3c/issue-1206-cddl-ref Update CDDL reference Commit: 597abf93b0553b96e41b0f8280e29548a8a37851 https://github.com/w3c/webauthn/commit/597abf93b0553b96e41b0f8280e29548a8a37851 Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-23 (Wed, 23 Oct 2019) Changed paths: M index.bs Log Message: ----------- Merge pull request #1321 from w3c/issue-1100-spec-roadmap Enhance spec roadmap section Commit: 688582582e6c7fc85d74b2ac5ce110a4b1f0dc50 https://github.com/w3c/webauthn/commit/688582582e6c7fc85d74b2ac5ce110a4b1f0dc50 Author: J.C. Jones <jc@mozilla.com> Date: 2019-10-23 (Wed, 23 Oct 2019) Changed paths: M index.bs Log Message: ----------- Merge pull request #1313 from w3c/issue-1305-uv-same-user Clarify assumptions about single-user authenticator and relation to UV Commit: 904e09e396fe883d14678f56cf0abf1a0cc345a6 https://github.com/w3c/webauthn/commit/904e09e396fe883d14678f56cf0abf1a0cc345a6 Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-23 (Wed, 23 Oct 2019) Changed paths: M index.bs Log Message: ----------- Merge pull request #1325 from w3c/issue-1260-batch-attestation Add batch attestation as alias of basic attestation Commit: 288cf58bed6d7967fd995d830ebf54cc50989efa https://github.com/w3c/webauthn/commit/288cf58bed6d7967fd995d830ebf54cc50989efa Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-23 (Wed, 23 Oct 2019) Changed paths: M index.bs Log Message: ----------- Merge pull request #1326 from w3c/issue-1133-makecred-authorize-collision-disclosure Add explanatory note to step 3 in authenticatorMakeCredential Commit: fc62216d8a9f50faf0eca5bbf7dbe9abe11c812f https://github.com/w3c/webauthn/commit/fc62216d8a9f50faf0eca5bbf7dbe9abe11c812f Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-23 (Wed, 23 Oct 2019) Changed paths: M index.bs Log Message: ----------- Merge pull request #1327 from w3c/issue-1201-tls Explicitly mention running over TLS in WebAuthn API intro Commit: 4ec28b3c23e4406538e3148f09903e7e5d7200a3 https://github.com/w3c/webauthn/commit/4ec28b3c23e4406538e3148f09903e7e5d7200a3 Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-23 (Wed, 23 Oct 2019) Changed paths: M index.bs Log Message: ----------- Update timeout examples to better agree with guidelines Commit: f8c13cb2fad6663dcc8df2f94951fd551c676fd8 https://github.com/w3c/webauthn/commit/f8c13cb2fad6663dcc8df2f94951fd551c676fd8 Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-23 (Wed, 23 Oct 2019) Changed paths: M index.bs Log Message: ----------- Fix off-by-factor-10 timeout example Commit: 235385cd007cd9d6b4efdc141ab9e2fb0b56d0b9 https://github.com/w3c/webauthn/commit/235385cd007cd9d6b4efdc141ab9e2fb0b56d0b9 Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-23 (Wed, 23 Oct 2019) Changed paths: M index.bs Log Message: ----------- Add explicit UV argument to registration example Commit: 5dbea683ac4651254896c9080cbf7136d5944f52 https://github.com/w3c/webauthn/commit/5dbea683ac4651254896c9080cbf7136d5944f52 Author: Emil Lundberg <emil@yubico.com> Date: 2019-10-23 (Wed, 23 Oct 2019) Changed paths: M index.bs Log Message: ----------- Merge pull request #1319 from w3c/issue-1317-timeout-examples Update timeout examples to better agree with guidelines Commit: fc9b0816b6db9b62bc8ef724b5de7979b4b3dbd0 https://github.com/w3c/webauthn/commit/fc9b0816b6db9b62bc8ef724b5de7979b4b3dbd0 Author: JeffH <jdhodges@google.com> Date: 2019-10-28 (Mon, 28 Oct 2019) Changed paths: M draft-hodges-webauthn-registries.html M draft-hodges-webauthn-registries.txt M draft-hodges-webauthn-registries.xml M images/fido-attestation-structures.svg M index.bs Log Message: ----------- Merge branch 'master' into jeffh-polish-feature-policy-handling Compare: https://github.com/w3c/webauthn/compare/542f337b0fb4...fc9b0816b6db
Received on Monday, 28 October 2019 18:54:02 UTC