Weekly github digest (WebAuthn)

Issues
------
* w3c/webauthn (+4/-6/💬14)
  4 issues created:
  - String Handling section nits (by aphillips)
    https://github.com/w3c/webauthn/issues/1527 
  - Support for language/direction metadata in PKCE 'name'? (by aphillips)
    https://github.com/w3c/webauthn/issues/1526 
  - Consider adding/using personal name examples that are more culturally neutral/diverse [editorial] (by aphillips)
    https://github.com/w3c/webauthn/issues/1525 
  - Algorithm step numbers out of sync (by emlun)
    https://github.com/w3c/webauthn/issues/1523 [type:editorial] 

  6 issues received 14 new comments:
  - #1522 Making PublicKeyCredentialDescriptor.transports mandatory (1 by jonathan-Mastercard)
    https://github.com/w3c/webauthn/issues/1522 
  - #1521 user-agent signal for enterprise attestation should be understandable for general users (1 by agl)
    https://github.com/w3c/webauthn/issues/1521 
  - #1519 KeyUsage requirement (Certificate Signing or empty) for attestation roots (1 by agl)
    https://github.com/w3c/webauthn/issues/1519 
  - #1518 largeBlob storage extension can be used to bypass 3p storage restrictions (3 by jumde, kenrb, nicksteele)
    https://github.com/w3c/webauthn/issues/1518 [privacy-needs-resolution] 
  - #1517 Location extension returns the authenticator coordinates to RP without user consent (1 by agl)
    https://github.com/w3c/webauthn/issues/1517 
  - #1302 Length restriction on user handles has no processing model associated with it (7 by agl, bzbarsky, nsatragno, othermaciej)
    https://github.com/w3c/webauthn/issues/1302 [type:WebPlatformTestNeeded] [type:technical] 

  6 issues closed:
  - KeyUsage requirement (Certificate Signing or empty) for attestation roots https://github.com/w3c/webauthn/issues/1519 
  - user-agent signal for enterprise attestation should be understandable for general users https://github.com/w3c/webauthn/issues/1521 
  - Algorithm step numbers out of sync https://github.com/w3c/webauthn/issues/1523 [stat:pr-open] [type:editorial] 
  - largeBlob storage extension can be used to bypass 3p storage restrictions https://github.com/w3c/webauthn/issues/1518 
  - Location extension returns the authenticator coordinates to RP without user consent https://github.com/w3c/webauthn/issues/1517 
  - Length restriction on user handles has no processing model associated with it https://github.com/w3c/webauthn/issues/1302 [type:WebPlatformTestNeeded] [type:technical] 



Pull requests
-------------
* w3c/webauthn (+1/-1/💬0)
  1 pull requests submitted:
  - Fix out-of-sync step number (by emlun)
    https://github.com/w3c/webauthn/pull/1524 [type:editorial] 

  1 pull requests merged:
  - Fix out-of-sync step number
    https://github.com/w3c/webauthn/pull/1524 [type:editorial] 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webauthn


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 24 November 2020 17:00:45 UTC