W3C home > Mailing lists > Public > public-webauthn@w3.org > March 2021

Re: Implementation report for WebAuthn 2 needs an update

From: Philippe Le Hegaret <plh@w3.org>
Date: Tue, 30 Mar 2021 13:41:58 -0400
To: W3C Web Authn WG <public-webauthn@w3.org>, Jiewen Tan <jiewen_tan@apple.com>, rmondello@apple.com, Daniel Veditz <dveditz@mozilla.com>
Cc: Adam Langley <agl@google.com>
Message-ID: <27275497-9629-df51-f04b-4c2d5812bfbd@w3.org>
[resent with Dan Veditz this time]

Thank you Adam for following up.

[adding folks from Mozilla and Apple in this loop]

On 3/25/2021 1:26 PM, Adam Langley wrote:
>     But it's not clear if those udpates cover all of the new features
>     provided by WebAuthn 2:
>     [[
>     New method to allow Discoverable/Resident Credentials Preferred
> 
> 
> "preferred" discoverable credentials covered
> in https://github.com/web-platform-tests/wpt/blob/master/webauthn/createcredential-resident-key.https.html
> <https://github.com/web-platform-tests/wpt/blob/master/webauthn/createcredential-resident-key.https.html>


WPT.fyi shows no implementation except Chrome/Edge:
 https://wpt.fyi/results/webauthn/createcredential-resident-key.https.html?label=experimental&label=master&aligned

> 
>     New methods added for Attestation Objects
> 
> 
> Tested in
> https://github.com/web-platform-tests/wpt/blob/master/webauthn/createcredential-getpublickey.https.html
> <https://github.com/web-platform-tests/wpt/blob/master/webauthn/createcredential-getpublickey.https.html>

Same, no implementation outside Chrome/Edge.

I noticed that the test wasn't looking at getTransports but it is
supported in Chrome/Edge. I checked that one manually as well and
arrived to the same conclusion.

Also found no progress from Firefox or WebKit on getTransports:
  https://bugzilla.mozilla.org/show_bug.cgi?id=1536155
  https://bugs.webkit.org/show_bug.cgi?id=204807

>     New Enterprise Attestation, Apple Attestation
> 
> 
> Not covered in WPTs.

Are we aware of implementations?

  
> 
>     New Large Blob storage and credential properties
> 
> 
> https://github.com/web-platform-tests/wpt/blob/master/webauthn/getcredential-large-blob-supported.https.html
> <https://github.com/web-platform-tests/wpt/blob/master/webauthn/getcredential-large-blob-supported.https.html>
> https://github.com/web-platform-tests/wpt/blob/master/webauthn/getcredential-large-blob-not-supported.https.html
> <https://github.com/web-platform-tests/wpt/blob/master/webauthn/getcredential-large-blob-not-supported.https.html>
> https://github.com/web-platform-tests/wpt/blob/master/webauthn/createcredential-large-blob-supported.https.html
> <https://github.com/web-platform-tests/wpt/blob/master/webauthn/createcredential-large-blob-supported.https.html>
> https://github.com/web-platform-tests/wpt/blob/master/webauthn/createcredential-large-blob-not-supported.https.html
> <https://github.com/web-platform-tests/wpt/blob/master/webauthn/createcredential-large-blob-not-supported.https.html>

Same, no implementation outside Chrome/Edge.

It looks like the results from wpt.fyi won't be enough of a story so we
need more information to complete the implementation experience [1]. It
could be that Google and Edge don't share much of the code anyway for
example. Or that no difficulties are foreseen by other implementors and
they just didn't get around those functions.

Philippe

[1] https://www.w3.org/2020/Process-20200915/#implementation-experience
Received on Tuesday, 30 March 2021 17:42:02 UTC

This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 07:26:43 UTC