- From: <nadalin@prodigy.net>
- Date: Tue, 10 Aug 2021 13:08:44 -0700
- To: "'W3C Web Authn WG'" <public-webauthn@w3.org>, "'John Fontana'" <jfontana@yubico.com>
- Message-ID: <09c301d78e23$869aa400$93cfec00$@prodigy.net>
Here is the agenda for the 08/11/2021 W3C Web Authentication WG Meeting, that will take place as a 60 minute teleconference. Remember call is at NOON PDT Select scribe please someone be willing to scribe so we can get down to the issues 1. Here is the link to the Level 2 Webauthn Recommendation https://www.w3.org/TR/2021/REC-webauthn-2-20210408/ 2. First Public Working Draft of Level 3 has now been published, https://www.w3.org/TR/webauthn-3/ 3. 2021 TPAC18-22 October: Breakout sessions- 25-29 October: Groups and Joint Meetings 4. SPWG Update 5. Draft Charter https://w3c.github.io/charter-drafts/2021/webauthn-2021.html 6. L3 WD01 open pull requests and open issues Pull requests <https://github.com/w3c/webauthn/pulls?q=is%3Aopen+is%3Apr+milestone%3AL3-WD -01> . w3c/webauthn (github.com) 1. Define <https://github.com/w3c/webauthn/pull/1649> "user account" by emlun . Pull Request #1649 . w3c/webauthn (github.com) 2. Note that largeBlob requires discoverable key on CTAP authenticators by emlun <https://github.com/w3c/webauthn/pull/1622> . Pull Request #1622 . w3c/webauthn (github.com) 3. Clarify, simplify and align parameter descriptions by emlun <https://github.com/w3c/webauthn/pull/1621> . Pull Request #1621 . w3c/webauthn (github.com) 4. conditional UI via mediation by equalsJeffH <https://github.com/w3c/webauthn/pull/1576> . Pull Request #1576 . w3c/webauthn (github.com) 5. Add recovery extension by emlun <https://github.com/w3c/webauthn/pull/1425> . Pull Request #1425 . w3c/webauthn (github.com) 6. Ask for tests for normative changes in CONTRIBUTING.md by foolip <https://github.com/w3c/webauthn/pull/653> . Pull Request #653 . w3c/webauthn (github.com) Pull requests <https://github.com/w3c/webauthn/pulls?q=is%3Aopen+is%3Apr+no%3Amilestone> . w3c/webauthn . GitHub 1. Fix tokenBinding definition type by emlun <https://github.com/w3c/webauthn/pull/1661> . Pull Request #1661 . w3c/webauthn (github.com) 2. Explicitly state that RPs cannot in general choose attestation type/format by emlun <https://github.com/w3c/webauthn/pull/1660> . Pull Request #1660 . w3c/webauthn (github.com) Issues <https://github.com/w3c/webauthn/issues?q=is%3Aopen+is%3Aissue+milestone%3AL 3-WD-01> . w3c/webauthn (github.com) 1. Cross-origin credential creation in iframes <https://github.com/w3c/webauthn/issues/1656> . Issue #1656 . w3c/webauthn (github.com) 2. U+ notation incorrect <https://github.com/w3c/webauthn/issues/1641> . Issue #1641 . w3c/webauthn (github.com) 3. reference CTAP2.1 PS spec and fix broken link <https://github.com/w3c/webauthn/issues/1635> . Issue #1635 . w3c/webauthn (github.com) 4. Missing Test Vectors <https://github.com/w3c/webauthn/issues/1633> . Issue #1633 . w3c/webauthn (github.com) 5. CollectedClientData.crossOrigin default value and whether it is required <https://github.com/w3c/webauthn/issues/1631> . Issue #1631 . w3c/webauthn (github.com) 6. Remove tokenBinding integration <https://github.com/w3c/webauthn/issues/1627> . Issue #1627 . w3c/webauthn (github.com) 7. Support for remote desktops <https://github.com/w3c/webauthn/issues/1577> . Issue #1577 . w3c/webauthn (github.com) 8. Prevent browsers from deleting credentials that the RP wanted to be server-side <https://github.com/w3c/webauthn/issues/1569> . Issue #1569 . w3c/webauthn (github.com) 9. Support a <https://github.com/w3c/webauthn/issues/1568> "create or get [or replace]" credential re-association operation . Issue #1568 . w3c/webauthn (github.com) 10. Questions about user handle when supporting usernameless <https://github.com/w3c/webauthn/issues/1559> . Issue #1559 . w3c/webauthn (github.com) 11. Move step 16 of Registration to between 21 and 22 <https://github.com/w3c/webauthn/issues/1555> . Issue #1555 . w3c/webauthn (github.com) 12. Adding info about HSTS for the RPID to client Data. <https://github.com/w3c/webauthn/issues/1554> . Issue #1554 . w3c/webauthn (github.com) 13. Add support for non-modal UI <https://github.com/w3c/webauthn/issues/1545> . Issue #1545 . w3c/webauthn (github.com) 14. Making PublicKeyCredentialDescriptor.transports mandatory <https://github.com/w3c/webauthn/issues/1522> . Issue #1522 . w3c/webauthn (github.com) 15. double check whether the Secure Payment Confirmation effort has implications on the WebAuthn spec <https://github.com/w3c/webauthn/issues/1492> . Issue #1492 . w3c/webauthn (github.com) 16. cleanup <https://github.com/w3c/webauthn/issues/1489> <pre class=anchors> and use <pre class="link-defaults"> as appropriate . Issue #1489 . w3c/webauthn (github.com) 17. Regarding the issue of Credential ID exposure(13.5.6), from what perspective should RP compare RK and NRK and which should be adopted? <https://github.com/w3c/webauthn/issues/1484> . Issue #1484 . w3c/webauthn (github.com) 18. Move PRF Extension into its own specification <https://github.com/w3c/webauthn/issues/1462> . Issue #1462 . w3c/webauthn (github.com) 19. Personal information updates <https://github.com/w3c/webauthn/issues/1456> & webauthn . Issue #1456 . w3c/webauthn (github.com) 20. Requesting properties of created credentials. <https://github.com/w3c/webauthn/issues/1449> . Issue #1449 . w3c/webauthn (github.com) 21. PublicKeyCredentialParameters can't select curve (E.g. ed448) <https://github.com/w3c/webauthn/issues/1446> . Issue #1446 . w3c/webauthn (github.com) 22. <https://github.com/w3c/webauthn/issues/1421> "privacy ca" term in images/fido-attestation-structures.svg . Issue #1421 . w3c/webauthn (github.com) 23. More explicitly document use cases <https://github.com/w3c/webauthn/issues/1389> . Issue #1389 . w3c/webauthn (github.com) 24. Addition of a network transport <https://github.com/w3c/webauthn/issues/1381> . Issue #1381 . w3c/webauthn (github.com) 25. Minor cleanups from PR 1270 review <https://github.com/w3c/webauthn/issues/1291> . Issue #1291 . w3c/webauthn (github.com) 26. Specify authenticator attachment for authentication operation <https://github.com/w3c/webauthn/issues/1267> . Issue #1267 . w3c/webauthn (github.com) 27. Clearly define the way how RP handles the extensions <https://github.com/w3c/webauthn/issues/1258> . Issue #1258 . w3c/webauthn (github.com) 28. add feature detection blurb... <https://github.com/w3c/webauthn/issues/1208> . Issue #1208 . w3c/webauthn (github.com) 29. think about adding note wrt how client platform might obtain authenticator capabilities <https://github.com/w3c/webauthn/issues/1207> . Issue #1207 . w3c/webauthn (github.com) 30. Update name, displayname and icon for RP and user <https://github.com/w3c/webauthn/issues/1200> . Issue #1200 . w3c/webauthn (github.com) 31. export definitions? <https://github.com/w3c/webauthn/issues/1049> . Issue #1049 . w3c/webauthn (github.com) 32. Recovering from Device Loss <https://github.com/w3c/webauthn/issues/931> . Issue #931 . w3c/webauthn (github.com) 33. undefined terms and terms we really ought to define <https://github.com/w3c/webauthn/issues/462> . Issue #462 . w3c/webauthn (github.com) Issues <https://github.com/w3c/webauthn/issues?q=is%3Aopen+is%3Aissue+-label%3Astat %3AOnGoing+-label%3Astat%3Apr-open+no%3Amilestone> . w3c/webauthn (github.com) 1. Choosing An Attestation Statement Format? <https://github.com/w3c/webauthn/issues/1659> . Issue #1659 . w3c/webauthn (github.com) 2. Device-bound key extension <https://github.com/w3c/webauthn/issues/1658> . Issue #1658 . w3c/webauthn (github.com) 3. Update URL to FIDO registry <https://github.com/w3c/webauthn/issues/1657> . Issue #1657 . w3c/webauthn (github.com) 4. Trailing position of metadata <https://github.com/w3c/webauthn/issues/1646> . Issue #1646 . w3c/webauthn (github.com) 5. [Editorial] Truncation description inaccurate <https://github.com/w3c/webauthn/issues/1645> . Issue #1645 . w3c/webauthn (github.com) 6. Mechanism for encoding *direction* metadata may need more work <https://github.com/w3c/webauthn/issues/1644> . Issue #1644 . w3c/webauthn (github.com) 7. Use of in-field metadata not preferred <https://github.com/w3c/webauthn/issues/1643> . Issue #1643 . w3c/webauthn (github.com) 8. Unicode <https://github.com/w3c/webauthn/issues/1642> "tag" characters are deprecated for language tagging . Issue #1642 . w3c/webauthn (github.com) 9. Syncing Platform Keys, Recoverability and Security levels <https://github.com/w3c/webauthn/issues/1640> . Issue #1640 . w3c/webauthn (github.com) 10. webauthn - API need to know the registration status of an platform authenticator <https://github.com/w3c/webauthn/issues/1639> . Issue #1639 . w3c/webauthn (github.com) 11. Possible experiences in a future WebAuthn <https://github.com/w3c/webauthn/issues/1637> . Issue #1637 . w3c/webauthn (github.com) 12. Managing FIDO keys <https://github.com/w3c/webauthn/issues/1612> . Issue #1612 . w3c/webauthn (github.com) 4. Other open issues 5. Adjourn Because of toll fraud issues MIT has been experiencing, I've been asked to change our call coordinates and password and, as an ongoing thing, not distribute the call coordinates publicly. That means not including the WebEx call number or URL in our agendas or minutes. You can find the new call coordinates at this link, accessible with your W3C member login credentials. https://www.w3.org/2016/01/webauth-password.html <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.w3.or g%2F2016%2F01%2Fwebauth-password.html&data=04%7C01%7Ctonynad%40microsoft.com %7C9cd59d2cfccb46b0986d08d82dcf4b7c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7 C0%7C637309715629125857%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoi V2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=rRnXdea9sqPx%2B7Z8fbc7bv %2F5nY%2BLZStYSARGKVdH1pA%3D&reserved=0> Get Outlook for Android <https://aka.ms/ghei36>
Received on Tuesday, 10 August 2021 20:11:01 UTC