public-webauthn@w3.org from August 2023 by author

Adam Langley

• [w3c/webauthn] 4b017b: Merge pull request #1884 from w3c/hints (Friday, 25 August)
• [w3c/webauthn] (Friday, 25 August)
• [w3c/webauthn] ef8630: Add a `hints` element for both `create` and `get`. (Friday, 25 August)
• [w3c/webauthn] bda342: Merge pull request #1 from w3c/master (Friday, 25 August)
• [w3c/webauthn] 8f0e23: Merge pull request #1920 from Kieun/kieun-1918 (Wednesday, 16 August)
• [w3c/webauthn] bda342: Merge pull request #1 from w3c/master (Wednesday, 16 August)
• [w3c/webauthn] eaa922: Apply emlun's suggestion. (Wednesday, 16 August)

Adam Langley via GitHub

• [webauthn] Merged Pull Request: Add a `hints` element for both `create` and `get`. (Friday, 25 August)
• [webauthn] new commits pushed by agl (Friday, 25 August)
• [webauthn] new commits pushed by agl (Friday, 25 August)
• Re: [webauthn] Add a `hints` element for both `create` and `get`. (#1884) (Wednesday, 16 August)
• [webauthn] new commits pushed by agl (Wednesday, 16 August)
• Closed: [webauthn] `attestation` and `attestationObject` is missing some of interfaces for assertions (#1918) (Wednesday, 16 August)
• [webauthn] Merged Pull Request: Add missing fields in dictionaries for JSON representation (Wednesday, 16 August)
• [webauthn] new commits pushed by agl (Wednesday, 16 August)

Andrey Paramonov via GitHub

• Re: [webauthn] Add `compound` attestation format (#1950) (Tuesday, 29 August)

Anthony Nadalin (W3C Calendar)

• Event Canceled: Web Authentication weekly (Tuesday, 29 August)
• Event Invitation: Web Authentication weekly (Wednesday, 16 August)
• Event Updated: Web Authentication bi-weekly (Wednesday, 9 August)

Anthony Nadalin via GitHub

• Re: [webauthn] Dependencies section is out of date and duplicates terms index (#1797) (Wednesday, 30 August)
• Re: [webauthn] Broken references in Web Authentication: An API for accessing Public Key Credentials - Level (#1794) (Wednesday, 30 August)

Arian van Putten via GitHub

• Re: [webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942) (Saturday, 19 August)
• Re: [webauthn] Add new getClientCapabilities method (#1923) (Tuesday, 1 August)

Arnar Birgisson via GitHub

• Re: [webauthn] Add authenticatorDisplayName to credProps (#1880) (Wednesday, 23 August)

David Waite via GitHub

• [webauthn] Pull Request: Enterprise packed attestation guidance (Wednesday, 30 August)
• [webauthn] Pull Request: Add packed attestation optional firmware version attribute (Wednesday, 30 August)
• Re: [webauthn] Add packed attestation optional firmware version attribute (#1953) (Wednesday, 30 August)
• [webauthn] Describe `firmware` OID usage in packed attestation (#1952) (Wednesday, 30 August)
• Closed: [webauthn] Signaling when user credentials are shared between users to the `relying party` (#1922) (Wednesday, 16 August)
• Re: [webauthn] Signaling when user credentials are shared between users to the `relying party` (#1922) (Wednesday, 16 August)

Emil Lundberg

• [w3c/webauthn] 235ab6: Pluralize implementations (Thursday, 31 August)
• [w3c/webauthn] f6bbe7: Remove outdated spec reference anchors (Thursday, 31 August)
• [w3c/webauthn] b72ecc: Use {{KeyFormat/raw}} (Wednesday, 23 August)
• [w3c/webauthn] c45533: Hard-code HKDF in PRF importCryptoKey (Wednesday, 23 August)
• [w3c/webauthn] (Wednesday, 23 August)
• [w3c/webauthn] 7b877b: Delete outdated note about checking registration U... (Wednesday, 23 August)
• [w3c/webauthn] 86dbab: Merge pull request #1930 from w3c/issue-1889-clari... (Wednesday, 16 August)
• [w3c/webauthn] (Wednesday, 16 August)
• [w3c/webauthn] 913576: Add security consideration section "Validating the... (Wednesday, 16 August)
• [w3c/webauthn] (Wednesday, 9 August)
• [w3c/webauthn] 7b1099: Disambiguate [=Window=] links as {{Window}} (Wednesday, 9 August)

Emil Lundberg via GitHub

• Re: [webauthn] [[preventSilentAccess]] seems incorrect (#1956) (Thursday, 31 August)
• [webauthn] [[preventSilentAccess]] seems incorrect (#1956) (Thursday, 31 August)
• [webauthn] new commits pushed by emlun (Thursday, 31 August)
• Re: [webauthn] Broken references in Web Authentication: An API for accessing Public Key Credentials - Level (#1794) (Thursday, 31 August)
• [webauthn] Pull Request: Fix broken spec references (Thursday, 31 August)
• [webauthn] new commits pushed by emlun (Thursday, 31 August)
• Re: [webauthn] Proposal/discussion: non-extractable CryptoKey output from the prf extension (#1895) (Thursday, 24 August)
• [webauthn] new commits pushed by emlun (Wednesday, 23 August)
• [webauthn] Pull Request: [Meta] Hard-code HKDF in PRF importCryptoKey (Wednesday, 23 August)
• [webauthn] Pull Request: Add importCryptoKey input to PRF extension (Wednesday, 23 August)
• [webauthn] new commits pushed by emlun (Wednesday, 23 August)
• [webauthn] new commits pushed by emlun (Wednesday, 23 August)
• [webauthn] Pull Request: Delete outdated note about checking registration UV with PRF extension (Wednesday, 23 August)
• [webauthn] new commits pushed by emlun (Wednesday, 23 August)
• Re: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915) (Friday, 18 August)
• Re: [webauthn] Add authenticatorDisplayName to credProps (#1880) (Friday, 18 August)
• Re: [webauthn] Adding some sentences to describe credential sharing between multiple users (#1921) (Thursday, 17 August)
• Closed: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915) (Wednesday, 16 August)
• Re: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915) (Wednesday, 16 August)
• Closed: [webauthn] Return public key in attestedCredentialData on authenticatorGetAssertion (#1928) (Wednesday, 16 August)
• Re: [webauthn] Return public key in attestedCredentialData on authenticatorGetAssertion (#1928) (Wednesday, 16 August)
• Closed: [webauthn] Clarify how the given origin in the ClientDataJSON matches to the expected one (#1889) (Wednesday, 16 August)
• [webauthn] new commits pushed by emlun (Wednesday, 16 August)
• [webauthn] Merged Pull Request: Add security consideration section "Validating the origin of a credential" (Wednesday, 16 August)
• Closed: [webauthn] Ambiguous reference to [=Window=] (#1910) (Wednesday, 9 August)
• [webauthn] new commits pushed by emlun (Wednesday, 9 August)
• [webauthn] Merged Pull Request: Disambiguate [=Window=] links as {{Window}} (Wednesday, 9 August)
• Re: [webauthn] Adding some sentences to describe credential sharing between multiple users (#1921) (Monday, 7 August)

Firstyear via GitHub

• Re: [webauthn] Signaling when user credentials are shared between users to the `relying party` (#1922) (Wednesday, 16 August)
• Re: [webauthn] Adding some sentences to describe credential sharing between multiple users (#1921) (Monday, 14 August)
• Re: [webauthn] remove passkey word (#1938) (Sunday, 6 August)
• Re: [webauthn] remove passkey word (#1938) (Saturday, 5 August)
• Re: [webauthn] remove isPasskeyPlatformAuthenticatorAvailable() (#1936) (Wednesday, 2 August)
• Re: [webauthn] remove isPasskeyPlatformAuthenticatorAvailable() (#1936) (Wednesday, 2 August)

github-actions[bot] via GitHub

• [webauthn] new commits pushed by github-actions[bot] (Friday, 25 August)
• [webauthn] new commits pushed by github-actions[bot] (Wednesday, 16 August)
• [webauthn] new commits pushed by github-actions[bot] (Wednesday, 16 August)
• [webauthn] new commits pushed by github-actions[bot] (Wednesday, 16 August)
• [webauthn] new commits pushed by github-actions[bot] (Wednesday, 16 August)
• [webauthn] new commits pushed by github-actions[bot] (Wednesday, 9 August)

James Elliott via GitHub

• Re: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Wednesday, 9 August)

John Bradley via GitHub

• Re: [webauthn] The default value of `attestation` member in `PublicKeyCredentialRequestOptions` should be null or must not have default value (#1941) (Thursday, 24 August)

Jordan Sexton via GitHub

• Re: [webauthn] WebAuthn available to Workers? aka "silent authentication" (#199) (Thursday, 24 August)

Juan C. Andreu via GitHub

• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Wednesday, 30 August)

Ki-Eun Shin via GitHub

• Re: [webauthn] The default value of `attestation` member in `PublicKeyCredentialRequestOptions` should be null or must not have default value (#1941) (Saturday, 26 August)
• [webauthn] Pull Request: Fix inconsistent usage of options variable (Thursday, 24 August)
• Re: [webauthn] Inconsistent variable reference of attestation and attestationFormats in the steps (#1947) (Wednesday, 23 August)
• [webauthn] Inconsistent variable reference of attestation and attestationFormats in the steps (#1947) (Wednesday, 23 August)
• Re: [webauthn] The default value of `attestation` member in `PublicKeyCredentialRequestOptions` should be null or must not have default value (#1941) (Wednesday, 23 August)
• [webauthn] The default value of `attestation` member in `PublicKeyCredentialRequestOptions` should be null (#1941) (Friday, 18 August)
• Re: [webauthn] Adding some sentences to describe credential sharing between multiple users (#1921) (Thursday, 17 August)
• Re: [webauthn] Adding some sentences to describe credential sharing between multiple users (#1921) (Wednesday, 16 August)

Kosuke Koiwai via GitHub

• [webauthn] Closed Pull Request: remove passkey word (Wednesday, 9 August)
• Re: [webauthn] remove passkey word (#1938) (Wednesday, 9 August)
• [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Tuesday, 8 August)
• Re: [webauthn] remove passkey word (#1938) (Monday, 7 August)
• [webauthn] Pull Request: remove passkey word (Friday, 4 August)
• Re: [webauthn] remove isPasskeyPlatformAuthenticatorAvailable() (#1936) (Wednesday, 2 August)

Matthew Miller

• [w3c/webauthn] 7068cf: Streamline user.name definition and add examples (Thursday, 24 August)
• [w3c/webauthn] 6b9a84: Suggest empty string for displayName when needed (Thursday, 24 August)
• [w3c/webauthn] 03937f: Try to tweak wording to emphasize name (Tuesday, 15 August)
• [w3c/webauthn] 4cc067: add getClientCapabilites method and enum (Wednesday, 9 August)
• [w3c/webauthn] 7dce3c: Merge pull request #1907 from w3c/1791-enforce-be-... (Wednesday, 9 August)
• [w3c/webauthn] (Wednesday, 9 August)
• [w3c/webauthn] 615e8e: Assert that be:0+bs:1 is bad during create() (Wednesday, 9 August)
• [w3c/webauthn] ea2241: Fix line length for `name` (Wednesday, 2 August)
• [w3c/webauthn] c24ac1: Trim line length (Tuesday, 1 August)
• [w3c/webauthn] f09e3d: Clarify that displayName can be the same as name (Tuesday, 1 August)

Matthew Miller via GitHub

• Closed: [webauthn] Enforce backup eligibility during assertion (#1791) (Wednesday, 30 August)
• Re: [webauthn] Spec abstract is out of date on the eve of multi-device credentials and cross-device auth (#1743) (Wednesday, 30 August)
• [webauthn] new commits pushed by MasterKale (Thursday, 24 August)
• [webauthn] new commits pushed by MasterKale (Thursday, 24 August)
• Re: [webauthn] Proposal/discussion: non-extractable CryptoKey output from the prf extension (#1895) (Wednesday, 16 August)
• [webauthn] new commits pushed by MasterKale (Tuesday, 15 August)
• Re: [webauthn] Non-modal registration during conditional assertion (#1929) (Monday, 14 August)
• Re: [webauthn] remove isPasskeyPlatformAuthenticatorAvailable() (#1936) (Wednesday, 9 August)
• [webauthn] new commits pushed by MasterKale (Wednesday, 9 August)
• Re: [webauthn] remove isPasskeyPlatformAuthenticatorAvailable() (#1936) (Wednesday, 9 August)
• [webauthn] new commits pushed by MasterKale (Wednesday, 9 August)
• [webauthn] Merged Pull Request: Define RP processing of be and bs flags during `.create()` and `.get()` (Wednesday, 9 August)
• Re: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Tuesday, 8 August)
• Re: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Tuesday, 8 August)
• [webauthn] new commits pushed by MasterKale (Wednesday, 2 August)
• Re: [webauthn] Add new getClientCapabilities method (#1923) (Wednesday, 2 August)
• Re: [webauthn] remove isPasskeyPlatformAuthenticatorAvailable() (#1936) (Wednesday, 2 August)
• Re: [webauthn] Remove isPPAA() and expand getClientCapabilities() (#1937) (Tuesday, 1 August)
• [webauthn] new commits pushed by MasterKale (Tuesday, 1 August)
• [webauthn] new commits pushed by MasterKale (Tuesday, 1 August)

Max Hata via GitHub

• Re: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Wednesday, 9 August)
• Re: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Wednesday, 9 August)
• Re: [webauthn] remove passkey word (#1938) (Saturday, 5 August)
• Re: [webauthn] remove isPasskeyPlatformAuthenticatorAvailable() (#1936) (Wednesday, 2 August)

nadalin@prodigy.net

• 08/30/2023 W3C Web Authentication Meeting (Wednesday, 30 August)
• 08/23/2023 W3C Web Authentication Meeting (Monday, 21 August)
• 08/16/2023 W3C Web Authentication Meeting (Wednesday, 16 August)
• 08/09/2023 W3C Web Authentication Meeting (Wednesday, 9 August)

Nick Steele

• [w3c/webauthn] 3cc3a8: Merge pull request #1914 from sbweeden/sbweeden_18... (Wednesday, 16 August)
• [w3c/webauthn] 0553e3: Explicitly require userHandle to be supplied durin... (Wednesday, 16 August)
• [w3c/webauthn] 783d71: Merge pull request #1931 from w3c/nsteele-authntct... (Wednesday, 16 August)
• [w3c/webauthn] 104733: Update Authenticator definition (Wednesday, 16 August)

Nick Steele via GitHub

• Re: [webauthn] WebAuthn available to Workers? aka "silent authentication" (#199) (Thursday, 24 August)
• Re: [webauthn] The default value of `attestation` member in `PublicKeyCredentialRequestOptions` should be null or must not have default value (#1941) (Thursday, 24 August)
• Closed: [webauthn] Add Changed Flag to UVM Entry (#1890) (Friday, 18 August)
• Re: [webauthn] Add Changed Flag to UVM Entry (#1890) (Friday, 18 August)
• Closed: [webauthn] Revisit description of userHandle (#1909) (Wednesday, 16 August)
• [webauthn] new commits pushed by nicksteele (Wednesday, 16 August)
• Closed: [webauthn] Require non-null userHandle when allowCredentials is empty? (#1892) (Wednesday, 16 August)
• [webauthn] Merged Pull Request: Address description of uses, and requirements for supplying userHandle (Wednesday, 16 August)
• [webauthn] new commits pushed by nicksteele (Wednesday, 16 August)
• [webauthn] Merged Pull Request: Update Authenticator Definition (Wednesday, 16 August)
• Closed: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Wednesday, 9 August)
• Re: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Wednesday, 9 August)
• Re: [webauthn] remove passkey word (#1938) (Friday, 4 August)

Nikita Semenov via GitHub

• Closed: [webauthn] Extension's data security on assertion (#1940) (Wednesday, 9 August)
• [webauthn] Extension's data security on assertion (#1940) (Wednesday, 9 August)

Nov Matake via GitHub

• Re: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Wednesday, 9 August)
• Re: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Wednesday, 9 August)

Pascoe via GitHub

• [webauthn] Pull Request: Initial text for conditional create (Tuesday, 29 August)
• Re: [webauthn] Non-modal registration during conditional assertion (#1929) (Wednesday, 16 August)

r-jo via GitHub

• [webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942) (Saturday, 19 August)
• Re: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915) (Saturday, 19 August)
• Re: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915) (Saturday, 19 August)
• Re: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915) (Friday, 18 August)
• Re: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915) (Friday, 18 August)

Ryan Shahine via GitHub

• Re: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915) (Saturday, 19 August)

Shane Weeden via GitHub

• Re: [webauthn] Allow desired attestation format to be an ordered list (#1917) (Wednesday, 23 August)
• Re: [webauthn] Adding some sentences to describe credential sharing between multiple users (#1921) (Thursday, 17 August)
• Re: [webauthn] Address description of uses, and requirements for supplying userHandle (#1914) (Wednesday, 16 August)

Tim Cappalli

• [w3c/webauthn] ae0786: rogue text change (Tuesday, 29 August)
• [w3c/webauthn] 11429c: initial text for compound attestation format (Tuesday, 29 August)
• [w3c/webauthn] (Wednesday, 9 August)
• [w3c/webauthn] 730716: remove isPasskeyPlatformAuthenticatorAvailable (Wednesday, 9 August)
• [w3c/webauthn] baa930: s/ClientCapability/ClientCapabilities (Wednesday, 2 August)
• [w3c/webauthn] 730716: remove isPasskeyPlatformAuthenticatorAvailable (Tuesday, 1 August)
• [w3c/webauthn] 6931da: change to dict and add new values (Tuesday, 1 August)

Tim Cappalli via GitHub

• Re: [webauthn] Allow conditional and modal flows to run simultaneously (#1854) (Wednesday, 30 August)
• Re: [webauthn] Clarify how to differentiate between exceptions (#1859) (Wednesday, 30 August)
• Re: [webauthn] Should enterprise attestation support be flagged explicitly? (#1742) (Wednesday, 30 August)
• Re: [webauthn] Clarify the need for truly randomly generated challenges (aka challenge callback issue) (#1856) (Wednesday, 30 August)
• Re: [webauthn] Add `compound` attestation format (#1950) (Tuesday, 29 August)
• [webauthn] Pull Request: Add `compound` attestation format (Tuesday, 29 August)
• [webauthn] new commits pushed by timcappalli (Tuesday, 29 August)
• [webauthn] new commits pushed by timcappalli (Tuesday, 29 August)
• Re: [webauthn] Adding some sentences to describe credential sharing between multiple users (#1921) (Wednesday, 16 August)
• [webauthn] Merged Pull Request: remove isPasskeyPlatformAuthenticatorAvailable() (Wednesday, 9 August)
• [webauthn] new commits pushed by timcappalli (Wednesday, 9 August)
• Re: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Wednesday, 9 August)
• Closed: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Wednesday, 9 August)
• Re: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Wednesday, 9 August)
• Re: [webauthn] Extension's data security on assertion (#1940) (Wednesday, 9 August)
• Re: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Wednesday, 9 August)
• Re: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Wednesday, 9 August)
• Re: [webauthn] Should we keep the word “passkey” in the spec or not (#1939) (Tuesday, 8 August)
• Re: [webauthn] remove passkey word (#1938) (Saturday, 5 August)
• Re: [webauthn] remove passkey word (#1938) (Saturday, 5 August)
• Re: [webauthn] remove passkey word (#1938) (Friday, 4 August)
• [webauthn] new commits pushed by timcappalli (Wednesday, 2 August)
• Re: [webauthn] remove isPasskeyPlatformAuthenticatorAvailable() (#1936) (Wednesday, 2 August)
• Re: [webauthn] Add new getClientCapabilities method (#1923) (Tuesday, 1 August)
• [webauthn] Remove isPPAA() and expand getClientCapabilities() (#1937) (Tuesday, 1 August)
• [webauthn] Pull Request: remove isPasskeyPlatformAuthenticatorAvailable() (Tuesday, 1 August)
• [webauthn] new commits pushed by timcappalli (Tuesday, 1 August)
• [webauthn] new commits pushed by timcappalli (Tuesday, 1 August)

W3C Webmaster via GitHub API

• Weekly github digest (WebAuthn) (Tuesday, 29 August)
• Weekly github digest (WebAuthn) (Tuesday, 22 August)
• Weekly github digest (WebAuthn) (Tuesday, 15 August)
• Weekly github digest (WebAuthn) (Tuesday, 8 August)
• Weekly github digest (WebAuthn) (Tuesday, 1 August)

Last message date: Thursday, 31 August 2023 12:43:02 UTC