Weekly github digest (WebAuthn)

Issues
------
* w3c/webauthn (+7/-2/💬13)
  7 issues created:
  - Making PublicKeyCredentialDescriptor.transports mandatory (by arshadnoor)
    https://github.com/w3c/webauthn/issues/1522 
  - user-agent signal for enterprise attestation should be understandable for general users (by jumde)
    https://github.com/w3c/webauthn/issues/1521 
  - KeyUsage requirement (Certificate Signing or empty) for attestation roots (by xbillyj)
    https://github.com/w3c/webauthn/issues/1519 
  - largeBlob storage extension can be used to bypass 3p storage restrictions (by jumde)
    https://github.com/w3c/webauthn/issues/1518 
  - Location extension returns the authenticator coordinates to RP without user consent (by jumde)
    https://github.com/w3c/webauthn/issues/1517 
  - migrate the WebAuthn L2 spec to the W3C 2020 Process Document? (by equalsJeffH)
    https://github.com/w3c/webauthn/issues/1515 [type:process] 
  - Support for PWA authenticators (by jcayzac)
    https://github.com/w3c/webauthn/issues/1514 

  6 issues received 13 new comments:
  - #1518 largeBlob storage extension can be used to bypass 3p storage restrictions (3 by emlun, jumde)
    https://github.com/w3c/webauthn/issues/1518 
  - #1517 Location extension returns the authenticator coordinates to RP without user consent (2 by jumde, ve7jtb)
    https://github.com/w3c/webauthn/issues/1517 
  - #1515 migrate the WebAuthn L2 spec to the W3C 2020 Process Document? (2 by wseltzer)
    https://github.com/w3c/webauthn/issues/1515 [type:process] 
  - #1514 Support for PWA authenticators (3 by jcayzac, nadalin, ve7jtb)
    https://github.com/w3c/webauthn/issues/1514 
  - #1510 User verification policy leads to ambiguous usage situations. (2 by Firstyear, equalsJeffH)
    https://github.com/w3c/webauthn/issues/1510 
  - #1477 need "how to install bikeshed in one's local webauthn repo clone" instructions (1 by wseltzer)
    https://github.com/w3c/webauthn/issues/1477 [priority:low] [type:process] 

  2 issues closed:
  - migrate the WebAuthn L2 spec to the W3C 2020 Process Document? https://github.com/w3c/webauthn/issues/1515 [type:process] 
  - ensure basic attestation type allows for self-signed attestation certs https://github.com/w3c/webauthn/issues/1498 [stat:pr-open] [subtype:attestation] [type:technical] 



Pull requests
-------------
* w3c/webauthn (+2/-3/💬2)
  2 pull requests submitted:
  - Update for L2-WD04 publication (by wseltzer)
    https://github.com/w3c/webauthn/pull/1520 
  - Update bikeshed files for Process 2020 (by wseltzer)
    https://github.com/w3c/webauthn/pull/1516 

  1 pull requests received 2 new comments:
  - #1520 Update for L2-WD04 publication (2 by YubicoDemo, nadalin)
    https://github.com/w3c/webauthn/pull/1520 

  3 pull requests merged:
  - Update for L2-WD04 publication
    https://github.com/w3c/webauthn/pull/1520 
  - Update bikeshed files for Process 2020
    https://github.com/w3c/webauthn/pull/1516 [type:editorial] [type:process] 
  - ensure basic attestation type allows for self-signed attestation certs
    https://github.com/w3c/webauthn/pull/1509 [type:technical] 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webauthn


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 17 November 2020 17:00:42 UTC