[w3c/webauthn]
[w3c/webauthn]
Re: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915)
- Re: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915)
- Re: [webauthn] username and display name should not be mandatory (rp, challange either) and OS UX should be simplified if not present (#1915)
[webauthn] Pull Request: Reference CTAP 2.1 errata spec
Re: [webauthn] Code Injection vulnerability from client side (#1965)
Closed: [webauthn] Code Injection vulnerability from client side (#1965)
Re: [webauthn] reference CTAP2.1 PS spec and fix broken link (#1635)
Re: [webauthn] Spec abstract is out of date on the eve of multi-device credentials and cross-device auth (#1743)
Closed: [webauthn] Spec abstract is out of date on the eve of multi-device credentials and cross-device auth (#1743)
[w3c/webauthn] 462773: Merge pull request #1988 from w3c/add-credprops-to...
[webauthn] new commits pushed by github-actions[bot]
[w3c/webauthn] 76e88e: Initial effort to allow credProps use during auth
[webauthn] Merged Pull Request: Allow use of credProps extension during auth
[webauthn] new commits pushed by nicksteele
[w3c/webauthn] c36951: Merge pull request #1992 from w3c/mm/conditional-u...
[webauthn] new commits pushed by github-actions[bot]
[w3c/webauthn] ea6e59: Add note about typical autocomplete combos
Closed: [webauthn] Spec is not specific enough about order of conditional UI autofill tokens (#1982)
[webauthn] new commits pushed by nicksteele
[w3c/webauthn] 4e244a: Merge pull request #2000 from sbweeden/sweeden_1998
[webauthn] new commits pushed by github-actions[bot]
[w3c/webauthn] d13f46: Clarify validation step for packed attestation cer...
[webauthn] new commits pushed by sbweeden
Weekly github digest (WebAuthn)
[webauthn] Pull Request: Fix references to credential private key that should be credential source
[w3c/webauthn] c2ec71: Fix references to credential private key that shou...
[webauthn] new commits pushed by emlun
[webauthn] Wrong type of encrypted content specified for credentialId under "Credential Storage Modality" section (#2002)
Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
Re: [webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942)
- Re: [webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942)
- Re: [webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942)
- Re: [webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942)
- Re: [webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942)
Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
[webauthn] Pull Request: Fix incorrect (?) reference in Add Virtual Authenticator
[w3c/webauthn] a6ee5a: Fix incorrect reference in Add Virtual Authenticator
[webauthn] new commits pushed by emlun
Event Canceled: Web Authentication weekly
[webauthn] Pull Request: Clarify validation step for packed attestation certificate for RPs.
Weekly github digest (WebAuthn)
[webauthn] Pull Request: Add backup flags to virtual authenticator
[w3c/webauthn]
[webauthn] How is an RP to know if a packed attestation root certificate is used for more multiple authenticator models? (#1998)
- Re: [webauthn] How is an RP to know if a packed attestation root certificate is used for multiple authenticator models? (#1998)
- Re: [webauthn] How is an RP to know if a packed attestation root certificate is used for multiple authenticator models? (#1998)
- Closed: [webauthn] How is an RP to know if a packed attestation root certificate is used for multiple authenticator models? (#1998)
[w3c/webauthn] c5c873: Merge pull request #1957 from w3c/spk
[webauthn] new commits pushed by github-actions[bot]
[w3c/webauthn]
[w3c/webauthn] 04dd9e: Remove `devicePubKey` extension.
[webauthn] new commits pushed by agl
[webauthn] Merged Pull Request: devicePubKey → supplementalPubKeys
[w3c/webauthn] cc1a9b: Extract recommended timeout ranges and defaults to...
[webauthn] new commits pushed by agl
Re: [webauthn] Add importCryptoKey input to PRF extension (#1945)
[webauthn] Closed Pull Request: Add importCryptoKey input to PRF extension
[w3c/webauthn] a1b203: Merge pull request #1986 from w3c/bikeshed-tweaks-2
[webauthn] new commits pushed by github-actions[bot]
[w3c/webauthn]
[w3c/webauthn] 4b49ca: Tweaks for bikeshed
[webauthn] new commits pushed by MasterKale
[webauthn] Merged Pull Request: Tweaks for bikeshed
[w3c/webauthn] 139405: Explicitly mention that these are examples
[webauthn] new commits pushed by MasterKale
[w3c/webauthn] d21314: Merge pull request #1855 from w3c/issue-1848-chall...
[webauthn] new commits pushed by github-actions[bot]
[w3c/webauthn]
[w3c/webauthn] cc1a9b: Extract recommended timeout ranges and defaults to...
[webauthn] new commits pushed by emlun
Closed: [webauthn] How long the relying party should maintain the challenge and related information? (#1848)
[webauthn] Merged Pull Request: Recommend duration of challenge validity
[w3c/webauthn] 9cf163: Update other instances of the SPK attestation prefix.
[webauthn] new commits pushed by agl
[w3c/webauthn] 228a1f: Enable linking to non-autofill credential type
Event Updated: Web Authentication weekly
[webauthn] new commits pushed by MasterKale
[w3c/webauthn] cf3ca3: authHash -> authData typo fix.
[webauthn] new commits pushed by agl
[w3c/webauthn] 15dad7: Drop assertion-time attestation.
[webauthn] Pull Request: Drop assertion-time attestation.
- Re: [webauthn] Drop assertion-time attestation. (#1997)
- Re: [webauthn] Drop assertion-time attestation. (#1997)
- Re: [webauthn] Drop assertion-time attestation. (#1997)
[webauthn] new commits pushed by agl
[w3c/webauthn] 462113: Apply emlun's changes from code review
[webauthn] new commits pushed by emlun
[w3c/webauthn] 72b78b: Address more of emlun's comments.
[webauthn] new commits pushed by agl
[w3c/webauthn] 5c7ca4: Incorporate PR feedback
[webauthn] new commits pushed by MasterKale
Re: [webauthn] Allow use of credProps extension during auth (#1988)
[w3c/webauthn] 1d2d52: Align credProps output reference with other extens...
[webauthn] new commits pushed by MasterKale
[w3c/webauthn] d39e8b: Say "PubKeys" not "PublicKeys"
[webauthn] new commits pushed by agl
[w3c/webauthn] 462113: Apply emlun's changes from code review
[webauthn] new commits pushed by agl
Re: [webauthn] create() and get() return an algorithm, not a credential (#1984)
[webauthn] Pull Request: Resolve conflicts between spk (#1957) and PR #1970
- Re: [webauthn] Resolve conflicts between spk (#1957) and PR #1970 (#1996)
- [webauthn] Closed Pull Request: Resolve conflicts between spk (#1957) and PR #1970
[w3c/webauthn] ba70ca: Merge branch 'main' into spk
[webauthn] new commits pushed by emlun
[w3c/webauthn] a24602: Merge branch 'main' into spk
[webauthn] new commits pushed by emlun
[w3c/webauthn] d87c22: Merge remote-tracking branch 'origin/main' into spk
[webauthn] new commits pushed by emlun
Event Canceled: Web Authentication weekly
Event Updated: Web Authentication weekly
Event Invitation: Web Authentication weekly
Weekly github digest (WebAuthn)
[webauthn] Pull Request: Add credProps client processing step to set authenticatorDisplayName
- [webauthn] Merged Pull Request: Add credProps client processing step to set authenticatorDisplayName
Weekly github digest (WebAuthn)
[webauthn] rp.name, user.name and user.displayName length limit does not state binary encoding (#1994)
EAP method based on FIDO (@ IETF this week)
[webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993)
- Re: [webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993)
- Re: [webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993)
- Re: [webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993)
- Re: [webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993)
- Closed: [webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993)
- Re: [webauthn] Inconsistent Passkey Authentication in Google Chrome (#1993)
Re: [webauthn] Consider allowing cross-domain credential use (#1372)
- Re: [webauthn] Consider allowing cross-domain credential use (#1372)
- Re: [webauthn] Consider allowing cross-domain credential use (#1372)
- Re: [webauthn] Consider allowing cross-domain credential use (#1372)
Re: [webauthn] Add new getClientCapabilities method (#1923)
- Re: [webauthn] Add new getClientCapabilities method (#1923)
- Re: [webauthn] Add new getClientCapabilities method (#1923)
- Re: [webauthn] Add new getClientCapabilities method (#1923)
Re: [webauthn] Clarify how to differentiate between exceptions (#1859)
- Re: [webauthn] Clarify how to differentiate between exceptions (#1859)
- Re: [webauthn] Clarify how to differentiate between exceptions (#1859)
- Re: [webauthn] Clarify how to differentiate between exceptions (#1859)
Event Updated: Web Authentication bi-weekly
Re: [webauthn] Virtual Authenticator API does not expose a way to set backup-eligible or backup-status flags (#1987)
[w3c/webauthn] f12069: Try to generate valid HTML
[webauthn] new commits pushed by MasterKale
[webauthn] Pull Request: Add note about typical autocomplete combos
- Re: [webauthn] Add note about typical autocomplete combos for conditional UI (#1992)
- Re: [webauthn] Add note about typical autocomplete combos for conditional UI (#1992)
- Re: [webauthn] Add note about typical autocomplete combos for conditional UI (#1992)
- Re: [webauthn] Add note about typical autocomplete combos for conditional UI (#1992)
- Re: [webauthn] Add note about typical autocomplete combos for conditional UI (#1992)
- Re: [webauthn] Add note about typical autocomplete combos for conditional UI (#1992)
- Re: [webauthn] Add note about typical autocomplete combos for conditional UI (#1992)
- [webauthn] Merged Pull Request: Add note about typical autocomplete combos for conditional UI