public-webauthn@w3.org from November 2023 by subject

11/01/2023 W3C Web Authentication Meeting - Corrected start time

11/15/2023 W3C Web Authentication Meeting

11/22/2023 W3C Web Authentication Meeting -CANCELLED

11/29/2023 W3C Web Authentication Meeting

[w3c/webauthn]

[w3c/webauthn] 04dd9e: Remove `devicePubKey` extension.

[w3c/webauthn] 139405: Explicitly mention that these are examples

[w3c/webauthn] 15dad7: Drop assertion-time attestation.

[w3c/webauthn] 1d2d52: Align credProps output reference with other extens...

[w3c/webauthn] 228a1f: Enable linking to non-autofill credential type

[w3c/webauthn] 462113: Apply emlun's changes from code review

[w3c/webauthn] 462773: Merge pull request #1988 from w3c/add-credprops-to...

[w3c/webauthn] 4b49ca: Tweaks for bikeshed

[w3c/webauthn] 4e244a: Merge pull request #2000 from sbweeden/sweeden_1998

[w3c/webauthn] 5c7ca4: Incorporate PR feedback

[w3c/webauthn] 72b78b: Address more of emlun's comments.

[w3c/webauthn] 76e88e: Initial effort to allow credProps use during auth

[w3c/webauthn] 9cf163: Update other instances of the SPK attestation prefix.

[w3c/webauthn] a1b203: Merge pull request #1986 from w3c/bikeshed-tweaks-2

[w3c/webauthn] a24602: Merge branch 'main' into spk

[w3c/webauthn] a6ee5a: Fix incorrect reference in Add Virtual Authenticator

[w3c/webauthn] ba70ca: Merge branch 'main' into spk

[w3c/webauthn] c2ec71: Fix references to credential private key that shou...

[w3c/webauthn] c36951: Merge pull request #1992 from w3c/mm/conditional-u...

[w3c/webauthn] c5c873: Merge pull request #1957 from w3c/spk

[w3c/webauthn] cc1a9b: Extract recommended timeout ranges and defaults to...

[w3c/webauthn] cf3ca3: authHash -> authData typo fix.

[w3c/webauthn] d13f46: Clarify validation step for packed attestation cer...

[w3c/webauthn] d21314: Merge pull request #1855 from w3c/issue-1848-chall...

[w3c/webauthn] d39e8b: Say "PubKeys" not "PublicKeys"

[w3c/webauthn] d87c22: Merge remote-tracking branch 'origin/main' into spk

[w3c/webauthn] ea6e59: Add note about typical autocomplete combos

[w3c/webauthn] f12069: Try to generate valid HTML

[webauthn] Add backup flags to virtual authenticator (#1999)

[webauthn] Add importCryptoKey input to PRF extension (#1945)

[webauthn] Add new getClientCapabilities method (#1923)

[webauthn] Add note about typical autocomplete combos for conditional UI (#1992)

[webauthn] Allow use of credProps extension during auth (#1988)

[webauthn] Clarify how to differentiate between exceptions (#1859)

[webauthn] Closed Pull Request: Add importCryptoKey input to PRF extension

[webauthn] Closed Pull Request: Resolve conflicts between spk (#1957) and PR #1970

[webauthn] Code Injection vulnerability from client side (#1965)

[webauthn] Consider allowing cross-domain credential use (#1372)

[webauthn] create() and get() return an algorithm, not a credential (#1984)

[webauthn] Drop assertion-time attestation. (#1997)

[webauthn] How is an RP to know if a packed attestation root certificate is used for more multiple authenticator models? (#1998)

[webauthn] How is an RP to know if a packed attestation root certificate is used for multiple authenticator models? (#1998)

[webauthn] How to know if a user has already registered a device? (#1749)

[webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993)

[webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942)

[webauthn] Merged Pull Request: Add credProps client processing step to set authenticatorDisplayName

[webauthn] Merged Pull Request: Add note about typical autocomplete combos for conditional UI

[webauthn] Merged Pull Request: Allow use of credProps extension during auth

[webauthn] Merged Pull Request: Clarify validation step for packed attestation certificate for RPs.

[webauthn] Merged Pull Request: devicePubKey → supplementalPubKeys

[webauthn] Merged Pull Request: Recommend duration of challenge validity

[webauthn] Merged Pull Request: Tweaks for bikeshed

[webauthn] new commits pushed by agl

[webauthn] new commits pushed by emlun

[webauthn] new commits pushed by github-actions[bot]

[webauthn] new commits pushed by MasterKale

[webauthn] new commits pushed by nicksteele

[webauthn] new commits pushed by sbweeden

[webauthn] Pull Request: Add backup flags to virtual authenticator

[webauthn] Pull Request: Add credProps client processing step to set authenticatorDisplayName

[webauthn] Pull Request: Add note about typical autocomplete combos

[webauthn] Pull Request: Clarify validation step for packed attestation certificate for RPs.

[webauthn] Pull Request: Drop assertion-time attestation.

[webauthn] Pull Request: Fix incorrect (?) reference in Add Virtual Authenticator

[webauthn] Pull Request: Fix references to credential private key that should be credential source

[webauthn] Pull Request: Reference CTAP 2.1 errata spec

[webauthn] Pull Request: Resolve conflicts between spk (#1957) and PR #1970

[webauthn] reference CTAP2.1 PS spec and fix broken link (#1635)

[webauthn] Resolve conflicts between spk (#1957) and PR #1970 (#1996)

[webauthn] rp.name, user.name and user.displayName length limit does not state binary encoding (#1994)

[webauthn] Spec abstract is out of date on the eve of multi-device credentials and cross-device auth (#1743)

[webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)

[webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915)

[webauthn] Virtual Authenticator API does not expose a way to set backup-eligible or backup-status flags (#1987)

[webauthn] Wrong type of encrypted content specified for credentialId under "Credential Storage Modality" section (#2002)

Closed: [webauthn] Code Injection vulnerability from client side (#1965)

Closed: [webauthn] How is an RP to know if a packed attestation root certificate is used for multiple authenticator models? (#1998)

Closed: [webauthn] How long the relying party should maintain the challenge and related information? (#1848)

Closed: [webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993)

Closed: [webauthn] Spec abstract is out of date on the eve of multi-device credentials and cross-device auth (#1743)

Closed: [webauthn] Spec is not specific enough about order of conditional UI autofill tokens (#1982)

EAP method based on FIDO (@ IETF this week)

Event Canceled: Web Authentication weekly

Event Invitation: Web Authentication weekly

Event Updated: Web Authentication bi-weekly

Event Updated: Web Authentication weekly

Weekly github digest (WebAuthn)

Last message date: Thursday, 30 November 2023 13:55:02 UTC