public-webauthn@w3.org from November 2023 by author

Adam Langley

• [w3c/webauthn] c5c873: Merge pull request #1957 from w3c/spk (Wednesday, 15 November)
• [w3c/webauthn] (Wednesday, 15 November)
• [w3c/webauthn] 04dd9e: Remove `devicePubKey` extension. (Wednesday, 15 November)
• [w3c/webauthn] cc1a9b: Extract recommended timeout ranges and defaults to... (Wednesday, 15 November)
• [w3c/webauthn] 9cf163: Update other instances of the SPK attestation prefix. (Wednesday, 15 November)
• [w3c/webauthn] cf3ca3: authHash -> authData typo fix. (Wednesday, 15 November)
• [w3c/webauthn] 15dad7: Drop assertion-time attestation. (Wednesday, 15 November)
• [w3c/webauthn] 72b78b: Address more of emlun's comments. (Wednesday, 15 November)
• [w3c/webauthn] d39e8b: Say "PubKeys" not "PublicKeys" (Wednesday, 15 November)
• [w3c/webauthn] 462113: Apply emlun's changes from code review (Wednesday, 15 November)
• Re: EAP method based on FIDO (@ IETF this week) (Monday, 6 November)

Adam Langley via GitHub

• Re: [webauthn] reference CTAP2.1 PS spec and fix broken link (#1635) (Wednesday, 29 November)
• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Saturday, 25 November)
• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Friday, 24 November)
• [webauthn] new commits pushed by agl (Wednesday, 15 November)
• [webauthn] Merged Pull Request: devicePubKey → supplementalPubKeys (Wednesday, 15 November)
• [webauthn] new commits pushed by agl (Wednesday, 15 November)
• Re: [webauthn] Drop assertion-time attestation. (#1997) (Wednesday, 15 November)
• [webauthn] new commits pushed by agl (Wednesday, 15 November)
• [webauthn] new commits pushed by agl (Wednesday, 15 November)
• [webauthn] Pull Request: Drop assertion-time attestation. (Wednesday, 15 November)
• [webauthn] new commits pushed by agl (Wednesday, 15 November)
• [webauthn] new commits pushed by agl (Wednesday, 15 November)
• [webauthn] new commits pushed by agl (Wednesday, 15 November)
• [webauthn] new commits pushed by agl (Wednesday, 15 November)
• Re: [webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993) (Saturday, 4 November)

alfonso-paella via GitHub

• Re: [webauthn] Consider allowing cross-domain credential use (#1372) (Thursday, 30 November)

Anthony Nadalin (W3C Calendar)

• Event Canceled: Web Authentication weekly (Wednesday, 22 November)
• Event Canceled: Web Authentication weekly (Wednesday, 15 November)
• Event Updated: Web Authentication weekly (Wednesday, 15 November)
• Event Invitation: Web Authentication weekly (Wednesday, 15 November)

Arian van Putten via GitHub

• Re: [webauthn] Drop assertion-time attestation. (#1997) (Thursday, 16 November)
• Re: [webauthn] Add note about typical autocomplete combos for conditional UI (#1992) (Wednesday, 1 November)

Arnaud Dagnelies via GitHub

• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Thursday, 30 November)
• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Sunday, 26 November)
• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Saturday, 25 November)

CyberCitizen via GitHub

• [webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993) (Saturday, 4 November)

Emil Lundberg

• [w3c/webauthn] (Thursday, 30 November)
• [w3c/webauthn] (Thursday, 30 November)
• [w3c/webauthn] c2ec71: Fix references to credential private key that shou... (Tuesday, 28 November)
• [w3c/webauthn] a6ee5a: Fix incorrect reference in Add Virtual Authenticator (Wednesday, 22 November)
• [w3c/webauthn] (Thursday, 16 November)
• [w3c/webauthn] d21314: Merge pull request #1855 from w3c/issue-1848-chall... (Wednesday, 15 November)
• [w3c/webauthn] (Wednesday, 15 November)
• [w3c/webauthn] cc1a9b: Extract recommended timeout ranges and defaults to... (Wednesday, 15 November)
• [w3c/webauthn] 462113: Apply emlun's changes from code review (Wednesday, 15 November)
• [w3c/webauthn] ba70ca: Merge branch 'main' into spk (Wednesday, 15 November)
• [w3c/webauthn] a24602: Merge branch 'main' into spk (Wednesday, 15 November)
• [w3c/webauthn] d87c22: Merge remote-tracking branch 'origin/main' into spk (Wednesday, 15 November)
• Re: EAP method based on FIDO (@ IETF this week) (Tuesday, 7 November)

Emil Lundberg via GitHub

• [webauthn] Pull Request: Fix references to credential private key that should be credential source (Tuesday, 28 November)
• [webauthn] new commits pushed by emlun (Tuesday, 28 November)
• Re: [webauthn] Add new getClientCapabilities method (#1923) (Monday, 27 November)
• Re: [webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942) (Friday, 24 November)
• [webauthn] Pull Request: Fix incorrect (?) reference in Add Virtual Authenticator (Wednesday, 22 November)
• [webauthn] new commits pushed by emlun (Wednesday, 22 November)
• Re: [webauthn] Add note about typical autocomplete combos for conditional UI (#1992) (Thursday, 16 November)
• [webauthn] Closed Pull Request: Resolve conflicts between spk (#1957) and PR #1970 (Thursday, 16 November)
• Re: [webauthn] Resolve conflicts between spk (#1957) and PR #1970 (#1996) (Thursday, 16 November)
• Re: [webauthn] Add note about typical autocomplete combos for conditional UI (#1992) (Thursday, 16 November)
• Re: [webauthn] How is an RP to know if a packed attestation root certificate is used for multiple authenticator models? (#1998) (Thursday, 16 November)
• Re: [webauthn] Add new getClientCapabilities method (#1923) (Wednesday, 15 November)
• Re: [webauthn] Add importCryptoKey input to PRF extension (#1945) (Wednesday, 15 November)
• [webauthn] Closed Pull Request: Add importCryptoKey input to PRF extension (Wednesday, 15 November)
• Closed: [webauthn] How long the relying party should maintain the challenge and related information? (#1848) (Wednesday, 15 November)
• [webauthn] new commits pushed by emlun (Wednesday, 15 November)
• [webauthn] Merged Pull Request: Recommend duration of challenge validity (Wednesday, 15 November)
• [webauthn] new commits pushed by emlun (Wednesday, 15 November)
• Re: [webauthn] create() and get() return an algorithm, not a credential (#1984) (Wednesday, 15 November)
• [webauthn] Pull Request: Resolve conflicts between spk (#1957) and PR #1970 (Wednesday, 15 November)
• [webauthn] new commits pushed by emlun (Wednesday, 15 November)
• [webauthn] new commits pushed by emlun (Wednesday, 15 November)
• [webauthn] new commits pushed by emlun (Wednesday, 15 November)
• [webauthn] Pull Request: Add credProps client processing step to set authenticatorDisplayName (Friday, 10 November)
• [webauthn] rp.name, user.name and user.displayName length limit does not state binary encoding (#1994) (Tuesday, 7 November)
• Re: [webauthn] Clarify how to differentiate between exceptions (#1859) (Wednesday, 1 November)

Firstyear via GitHub

• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Friday, 24 November)
• Re: [webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942) (Friday, 24 November)
• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Friday, 24 November)
• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Thursday, 23 November)
• Re: [webauthn] rp.name, user.name and user.displayName length limit does not state binary encoding (#1994) (Thursday, 9 November)
• Re: [webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993) (Sunday, 5 November)
• Re: [webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993) (Sunday, 5 November)

github-actions[bot] via GitHub

• [webauthn] new commits pushed by github-actions[bot] (Wednesday, 29 November)
• [webauthn] new commits pushed by github-actions[bot] (Wednesday, 29 November)
• [webauthn] new commits pushed by github-actions[bot] (Wednesday, 29 November)
• [webauthn] new commits pushed by github-actions[bot] (Wednesday, 15 November)
• [webauthn] new commits pushed by github-actions[bot] (Wednesday, 15 November)
• [webauthn] new commits pushed by github-actions[bot] (Wednesday, 15 November)

Jaimin Bhatt via GitHub

• Re: [webauthn] Consider allowing cross-domain credential use (#1372) (Friday, 3 November)

Jan-Frederik Rieckers

• Re: EAP method based on FIDO (@ IETF this week) (Tuesday, 7 November)

Joel Biddle via GitHub

• Re: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915) (Thursday, 30 November)
• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Thursday, 30 November)
• Re: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915) (Thursday, 30 November)
• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Wednesday, 29 November)

John Fontana (W3C Calendar)

• Event Updated: Web Authentication bi-weekly (Wednesday, 1 November)

John Schanck via GitHub

• Re: [webauthn] Add new getClientCapabilities method (#1923) (Wednesday, 1 November)

Juan C. Andreu via GitHub

• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Thursday, 30 November)

Lucas Garron via GitHub

• Re: [webauthn] Clarify how to differentiate between exceptions (#1859) (Friday, 3 November)

Matthew Miller

• [w3c/webauthn] a1b203: Merge pull request #1986 from w3c/bikeshed-tweaks-2 (Wednesday, 15 November)
• [w3c/webauthn] (Wednesday, 15 November)
• [w3c/webauthn] 4b49ca: Tweaks for bikeshed (Wednesday, 15 November)
• [w3c/webauthn] 139405: Explicitly mention that these are examples (Wednesday, 15 November)
• [w3c/webauthn] 228a1f: Enable linking to non-autofill credential type (Wednesday, 15 November)
• [w3c/webauthn] 5c7ca4: Incorporate PR feedback (Wednesday, 15 November)
• [w3c/webauthn] 1d2d52: Align credProps output reference with other extens... (Wednesday, 15 November)
• [w3c/webauthn] f12069: Try to generate valid HTML (Wednesday, 1 November)
• [w3c/webauthn] ea6e59: Add note about typical autocomplete combos (Wednesday, 1 November)

Matthew Miller via GitHub

• Re: [webauthn] Add note about typical autocomplete combos for conditional UI (#1992) (Thursday, 16 November)
• Re: [webauthn] Add new getClientCapabilities method (#1923) (Wednesday, 15 November)
• [webauthn] new commits pushed by MasterKale (Wednesday, 15 November)
• [webauthn] Merged Pull Request: Tweaks for bikeshed (Wednesday, 15 November)
• [webauthn] new commits pushed by MasterKale (Wednesday, 15 November)
• [webauthn] new commits pushed by MasterKale (Wednesday, 15 November)
• [webauthn] new commits pushed by MasterKale (Wednesday, 15 November)
• Re: [webauthn] Allow use of credProps extension during auth (#1988) (Wednesday, 15 November)
• [webauthn] new commits pushed by MasterKale (Wednesday, 15 November)
• [webauthn] Merged Pull Request: Add credProps client processing step to set authenticatorDisplayName (Wednesday, 15 November)
• Re: [webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993) (Sunday, 5 November)
• Re: [webauthn] Clarify how to differentiate between exceptions (#1859) (Friday, 3 November)
• Re: [webauthn] Clarify how to differentiate between exceptions (#1859) (Wednesday, 1 November)
• Re: [webauthn] Virtual Authenticator API does not expose a way to set backup-eligible or backup-status flags (#1987) (Wednesday, 1 November)
• Re: [webauthn] Add note about typical autocomplete combos for conditional UI (#1992) (Wednesday, 1 November)
• [webauthn] new commits pushed by MasterKale (Wednesday, 1 November)
• [webauthn] Pull Request: Add note about typical autocomplete combos (Wednesday, 1 November)
• [webauthn] new commits pushed by MasterKale (Wednesday, 1 November)

Michael B. Jones via GitHub

• [webauthn] Pull Request: Reference CTAP 2.1 errata spec (Thursday, 30 November)

Mitar via GitHub

• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Wednesday, 29 November)
• Re: [webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942) (Sunday, 26 November)
• Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568) (Saturday, 25 November)
• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Saturday, 25 November)
• Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568) (Friday, 24 November)
• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Friday, 24 November)
• Re: [webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942) (Friday, 24 November)
• Re: [webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942) (Friday, 24 November)
• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Friday, 24 November)
• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Thursday, 23 November)
• Re: [webauthn] How to know if a user has already registered a device? (#1749) (Thursday, 23 November)

nadalin@prodigy.net

• 11/29/2023 W3C Web Authentication Meeting (Wednesday, 29 November)
• RE: 11/15/2023 W3C Web Authentication Meeting (Wednesday, 29 November)
• 11/22/2023 W3C Web Authentication Meeting -CANCELLED (Wednesday, 22 November)
• 11/15/2023 W3C Web Authentication Meeting (Wednesday, 15 November)
• 11/01/2023 W3C Web Authentication Meeting - Corrected start time (Wednesday, 1 November)

Nick Steele

• [w3c/webauthn] 462773: Merge pull request #1988 from w3c/add-credprops-to... (Wednesday, 29 November)
• [w3c/webauthn] 76e88e: Initial effort to allow credProps use during auth (Wednesday, 29 November)
• [w3c/webauthn] c36951: Merge pull request #1992 from w3c/mm/conditional-u... (Wednesday, 29 November)
• [w3c/webauthn] ea6e59: Add note about typical autocomplete combos (Wednesday, 29 November)

Nick Steele via GitHub

• Re: [webauthn] Code Injection vulnerability from client side (#1965) (Wednesday, 29 November)
• Closed: [webauthn] Code Injection vulnerability from client side (#1965) (Wednesday, 29 November)
• Re: [webauthn] Spec abstract is out of date on the eve of multi-device credentials and cross-device auth (#1743) (Wednesday, 29 November)
• Closed: [webauthn] Spec abstract is out of date on the eve of multi-device credentials and cross-device auth (#1743) (Wednesday, 29 November)
• [webauthn] Merged Pull Request: Allow use of credProps extension during auth (Wednesday, 29 November)
• [webauthn] new commits pushed by nicksteele (Wednesday, 29 November)
• Closed: [webauthn] Spec is not specific enough about order of conditional UI autofill tokens (#1982) (Wednesday, 29 November)
• [webauthn] new commits pushed by nicksteele (Wednesday, 29 November)
• [webauthn] Merged Pull Request: Add note about typical autocomplete combos for conditional UI (Wednesday, 29 November)

Nina Satragno via GitHub

• Re: [webauthn] Add backup flags to virtual authenticator (#1999) (Monday, 27 November)
• [webauthn] Pull Request: Add backup flags to virtual authenticator (Monday, 20 November)
• Re: [webauthn] Add note about typical autocomplete combos for conditional UI (#1992) (Thursday, 16 November)
• Re: [webauthn] Add note about typical autocomplete combos for conditional UI (#1992) (Wednesday, 1 November)

Philippe Le Hegaret (W3C Calendar)

• Event Updated: Web Authentication weekly (Wednesday, 15 November)

r-jo via GitHub

• Re: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915) (Thursday, 30 November)

Rolf Lindemann via GitHub

• Re: [webauthn] Drop assertion-time attestation. (#1997) (Wednesday, 15 November)

Ryo Kajiwara via GitHub

• [webauthn] Wrong type of encrypted content specified for credentialId under "Credential Storage Modality" section (#2002) (Tuesday, 28 November)

Samuel Weiler

• EAP method based on FIDO (@ IETF this week) (Sunday, 5 November)

Shane Weeden

• [w3c/webauthn] 4e244a: Merge pull request #2000 from sbweeden/sweeden_1998 (Wednesday, 29 November)
• [w3c/webauthn] d13f46: Clarify validation step for packed attestation cer... (Wednesday, 29 November)

Shane Weeden via GitHub

• Closed: [webauthn] How is an RP to know if a packed attestation root certificate is used for multiple authenticator models? (#1998) (Wednesday, 29 November)
• [webauthn] new commits pushed by sbweeden (Wednesday, 29 November)
• [webauthn] Merged Pull Request: Clarify validation step for packed attestation certificate for RPs. (Wednesday, 29 November)
• Re: [webauthn] How is an RP to know if a packed attestation root certificate is used for multiple authenticator models? (#1998) (Wednesday, 22 November)
• [webauthn] Pull Request: Clarify validation step for packed attestation certificate for RPs. (Wednesday, 22 November)
• [webauthn] How is an RP to know if a packed attestation root certificate is used for more multiple authenticator models? (#1998) (Thursday, 16 November)

Tim Cappalli via GitHub

• Re: [webauthn] Consider allowing cross-domain credential use (#1372) (Thursday, 30 November)
• Re: [webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993) (Monday, 6 November)
• Closed: [webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993) (Monday, 6 November)
• Re: [webauthn] Consider allowing cross-domain credential use (#1372) (Friday, 3 November)

W3C Webmaster via GitHub API

• Weekly github digest (WebAuthn) (Tuesday, 28 November)
• Weekly github digest (WebAuthn) (Tuesday, 21 November)
• Weekly github digest (WebAuthn) (Tuesday, 14 November)
• Weekly github digest (WebAuthn) (Tuesday, 7 November)

Last message date: Thursday, 30 November 2023 13:55:02 UTC