08/09/2023 W3C Web Authentication Meeting
08/16/2023 W3C Web Authentication Meeting
08/23/2023 W3C Web Authentication Meeting
08/30/2023 W3C Web Authentication Meeting
[w3c/webauthn]
[w3c/webauthn] 03937f: Try to tweak wording to emphasize name
[w3c/webauthn] 0553e3: Explicitly require userHandle to be supplied durin...
[w3c/webauthn] 104733: Update Authenticator definition
[w3c/webauthn] 11429c: initial text for compound attestation format
[w3c/webauthn] 235ab6: Pluralize implementations
[w3c/webauthn] 3cc3a8: Merge pull request #1914 from sbweeden/sbweeden_18...
[w3c/webauthn] 4b017b: Merge pull request #1884 from w3c/hints
[w3c/webauthn] 4cc067: add getClientCapabilites method and enum
[w3c/webauthn] 615e8e: Assert that be:0+bs:1 is bad during create()
[w3c/webauthn] 6931da: change to dict and add new values
[w3c/webauthn] 6b9a84: Suggest empty string for displayName when needed
[w3c/webauthn] 7068cf: Streamline user.name definition and add examples
[w3c/webauthn] 730716: remove isPasskeyPlatformAuthenticatorAvailable
[w3c/webauthn] 783d71: Merge pull request #1931 from w3c/nsteele-authntct...
[w3c/webauthn] 7b1099: Disambiguate [=Window=] links as {{Window}}
[w3c/webauthn] 7b877b: Delete outdated note about checking registration U...
[w3c/webauthn] 7dce3c: Merge pull request #1907 from w3c/1791-enforce-be-...
[w3c/webauthn] 86dbab: Merge pull request #1930 from w3c/issue-1889-clari...
[w3c/webauthn] 8f0e23: Merge pull request #1920 from Kieun/kieun-1918
[w3c/webauthn] 913576: Add security consideration section "Validating the...
[w3c/webauthn] ae0786: rogue text change
[w3c/webauthn] b72ecc: Use {{KeyFormat/raw}}
[w3c/webauthn] baa930: s/ClientCapability/ClientCapabilities
[w3c/webauthn] bda342: Merge pull request #1 from w3c/master
[w3c/webauthn] c24ac1: Trim line length
[w3c/webauthn] c45533: Hard-code HKDF in PRF importCryptoKey
[w3c/webauthn] ea2241: Fix line length for `name`
[w3c/webauthn] eaa922: Apply emlun's suggestion.
[w3c/webauthn] ef8630: Add a `hints` element for both `create` and `get`.
[w3c/webauthn] f09e3d: Clarify that displayName can be the same as name
[w3c/webauthn] f6bbe7: Remove outdated spec reference anchors
[webauthn] [[preventSilentAccess]] seems incorrect (#1956)
[webauthn] Add `compound` attestation format (#1950)
[webauthn] Add a `hints` element for both `create` and `get`. (#1884)
[webauthn] Add authenticatorDisplayName to credProps (#1880)
[webauthn] Add Changed Flag to UVM Entry (#1890)
[webauthn] Add new getClientCapabilities method (#1923)
[webauthn] Add packed attestation optional firmware version attribute (#1953)
[webauthn] Adding some sentences to describe credential sharing between multiple users (#1921)
[webauthn] Address description of uses, and requirements for supplying userHandle (#1914)
[webauthn] Allow conditional and modal flows to run simultaneously (#1854)
[webauthn] Allow desired attestation format to be an ordered list (#1917)
[webauthn] Broken references in Web Authentication: An API for accessing Public Key Credentials - Level (#1794)
[webauthn] Clarify how to differentiate between exceptions (#1859)
[webauthn] Clarify the need for truly randomly generated challenges (aka challenge callback issue) (#1856)
[webauthn] Closed Pull Request: remove passkey word
[webauthn] Dependencies section is out of date and duplicates terms index (#1797)
[webauthn] Describe `firmware` OID usage in packed attestation (#1952)
[webauthn] Extension's data security on assertion (#1940)
[webauthn] How to know if a user has already registered a device? (#1749)
[webauthn] Inconsistent variable reference of attestation and attestationFormats in the steps (#1947)
[webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942)
[webauthn] Merged Pull Request: Add a `hints` element for both `create` and `get`.
[webauthn] Merged Pull Request: Add missing fields in dictionaries for JSON representation
[webauthn] Merged Pull Request: Add security consideration section "Validating the origin of a credential"
[webauthn] Merged Pull Request: Address description of uses, and requirements for supplying userHandle
[webauthn] Merged Pull Request: Define RP processing of be and bs flags during `.create()` and `.get()`
[webauthn] Merged Pull Request: Disambiguate [=Window=] links as {{Window}}
[webauthn] Merged Pull Request: remove isPasskeyPlatformAuthenticatorAvailable()
[webauthn] Merged Pull Request: Update Authenticator Definition
[webauthn] new commits pushed by agl
[webauthn] new commits pushed by emlun
[webauthn] new commits pushed by github-actions[bot]
[webauthn] new commits pushed by MasterKale
[webauthn] new commits pushed by nicksteele
[webauthn] new commits pushed by timcappalli
[webauthn] Non-modal registration during conditional assertion (#1929)
[webauthn] Proposal/discussion: non-extractable CryptoKey output from the prf extension (#1895)
[webauthn] Pull Request: [Meta] Hard-code HKDF in PRF importCryptoKey
[webauthn] Pull Request: Add `compound` attestation format
[webauthn] Pull Request: Add importCryptoKey input to PRF extension
[webauthn] Pull Request: Add packed attestation optional firmware version attribute
[webauthn] Pull Request: Delete outdated note about checking registration UV with PRF extension
[webauthn] Pull Request: Enterprise packed attestation guidance
[webauthn] Pull Request: Fix broken spec references
[webauthn] Pull Request: Fix inconsistent usage of options variable
[webauthn] Pull Request: Initial text for conditional create
[webauthn] Pull Request: remove isPasskeyPlatformAuthenticatorAvailable()
[webauthn] Pull Request: remove passkey word
[webauthn] remove isPasskeyPlatformAuthenticatorAvailable() (#1936)
[webauthn] Remove isPPAA() and expand getClientCapabilities() (#1937)
[webauthn] remove passkey word (#1938)
[webauthn] Return public key in attestedCredentialData on authenticatorGetAssertion (#1928)
[webauthn] Should enterprise attestation support be flagged explicitly? (#1742)
[webauthn] Should we keep the word “passkey” in the spec or not (#1939)
- Nick Steele via GitHub (Wednesday, 9 August)
- James Elliott via GitHub (Wednesday, 9 August)
- Tim Cappalli via GitHub (Wednesday, 9 August)
- Max Hata via GitHub (Wednesday, 9 August)
- Tim Cappalli via GitHub (Wednesday, 9 August)
- Nov Matake via GitHub (Wednesday, 9 August)
- Tim Cappalli via GitHub (Wednesday, 9 August)
- Tim Cappalli via GitHub (Wednesday, 9 August)
- Nov Matake via GitHub (Wednesday, 9 August)
- Max Hata via GitHub (Wednesday, 9 August)
- Matthew Miller via GitHub (Tuesday, 8 August)
- Matthew Miller via GitHub (Tuesday, 8 August)
- Tim Cappalli via GitHub (Tuesday, 8 August)
- Kosuke Koiwai via GitHub (Tuesday, 8 August)
[webauthn] Signaling when user credentials are shared between users to the `relying party` (#1922)
[webauthn] Spec abstract is out of date on the eve of multi-device credentials and cross-device auth (#1743)
[webauthn] The default value of `attestation` member in `PublicKeyCredentialRequestOptions` should be null (#1941)
[webauthn] The default value of `attestation` member in `PublicKeyCredentialRequestOptions` should be null or must not have default value (#1941)
[webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915)
[webauthn] WebAuthn available to Workers? aka "silent authentication" (#199)
Closed: [webauthn] `attestation` and `attestationObject` is missing some of interfaces for assertions (#1918)
Closed: [webauthn] Add Changed Flag to UVM Entry (#1890)
Closed: [webauthn] Ambiguous reference to [=Window=] (#1910)
Closed: [webauthn] Clarify how the given origin in the ClientDataJSON matches to the expected one (#1889)
Closed: [webauthn] Enforce backup eligibility during assertion (#1791)
Closed: [webauthn] Extension's data security on assertion (#1940)
Closed: [webauthn] Require non-null userHandle when allowCredentials is empty? (#1892)
Closed: [webauthn] Return public key in attestedCredentialData on authenticatorGetAssertion (#1928)
Closed: [webauthn] Revisit description of userHandle (#1909)
Closed: [webauthn] Should we keep the word “passkey” in the spec or not (#1939)
Closed: [webauthn] Signaling when user credentials are shared between users to the `relying party` (#1922)
Closed: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915)
Event Canceled: Web Authentication weekly
Event Invitation: Web Authentication weekly
Event Updated: Web Authentication bi-weekly
Weekly github digest (WebAuthn)
Last message date: Thursday, 31 August 2023 12:43:02 UTC