public-webauthn@w3.org from September 2023 by author

Adam Langley

[w3c/webauthn] 0b011e: Update capitalisation as requested. (Friday, 29 September)
[w3c/webauthn] 254d00: Highlight that filtering all pubKeyCredParams is a... (Thursday, 21 September)
[w3c/webauthn] f5ea86: Remove the requirement that SPK be used only with ... (Wednesday, 20 September)
[w3c/webauthn] 49e91d: Merge pull request #1948 from Kieun/kieun-1947 (Wednesday, 20 September)
[w3c/webauthn] 480013: Fix inconsistent usage of options variable (Wednesday, 20 September)
[w3c/webauthn] 04dd9e: Remove `devicePubKey` extension. (Wednesday, 6 September)
[w3c/webauthn] 431fd4: devicePubKey → supplementalPubKeys (Sunday, 3 September)

Adam Langley via GitHub

[webauthn] new commits pushed by agl (Friday, 29 September)
[webauthn] Closed Pull Request: Specify what an unknown type credential descriptor being ignored means (Wednesday, 27 September)
Re: [webauthn] Specify what an unknown type credential descriptor being ignored means (#1966) (Wednesday, 27 September)
Re: [webauthn] Specify what an unknown type credential descriptor being ignored means (#1966) (Thursday, 21 September)
[webauthn] Pull Request: Highlight that filtering all pubKeyCredParams is an error. (Thursday, 21 September)
[webauthn] new commits pushed by agl (Thursday, 21 September)
[webauthn] new commits pushed by agl (Wednesday, 20 September)
Closed: [webauthn] Inconsistent variable reference of attestation and attestationFormats in the steps (#1947) (Wednesday, 20 September)
[webauthn] Merged Pull Request: Fix inconsistent usage of options variable (Wednesday, 20 September)
[webauthn] new commits pushed by agl (Wednesday, 20 September)
Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Monday, 11 September)
Re: [webauthn] Add packed attestation optional firmware version attribute (#1953) (Thursday, 7 September)
Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Wednesday, 6 September)
[webauthn] new commits pushed by agl (Wednesday, 6 September)
Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Wednesday, 6 September)
Re: [webauthn] Add importCryptoKey input to PRF extension (#1945) (Wednesday, 6 September)
Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Tuesday, 5 September)
Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Monday, 4 September)
[webauthn] Pull Request: devicePubKey → supplementalPubKeys (Sunday, 3 September)
[webauthn] new commits pushed by agl (Sunday, 3 September)

Aditya Mitra via GitHub

Re: [webauthn] Code Injection vulnerability from client side (#1965) (Sunday, 17 September)
Re: [webauthn] Code Injection vulnerability from client side (#1965) (Sunday, 17 September)
Re: [webauthn] Code Injection vulnerability from client side (#1965) (Saturday, 16 September)
Re: [webauthn] Code Injection vulnerability from client side (#1965) (Saturday, 16 September)
[webauthn] Code Injection vulnerability from client side (#1965) (Saturday, 16 September)

Amos Lim via GitHub

[webauthn] Pull Request: Specify what an unknown type credential descriptor being ignored means (Monday, 18 September)

Anthony Nadalin (W3C Calendar)

Event Invitation: Web Authentication weekly (Wednesday, 20 September)
Event Invitation: Web Authentication weekly (Wednesday, 20 September)
Event Invitation: Web Authentication weekly (Wednesday, 20 September)
Event Updated: Web Authentication WG (Monday, 11 September)

Arian van Putten via GitHub

Re: [webauthn] Code Injection vulnerability from client side (#1965) (Tuesday, 26 September)
Re: [webauthn] Extend WebAuthn spec to support interoperability in WebExtensions (#1766) (Tuesday, 26 September)
Re: [webauthn] Provide a way for Web Extensions to hook into browser's Passkey autofill UI (#1976) (Tuesday, 26 September)
[webauthn] Provide a way for Web Extensions to hook into browser's Passkey autofill UI (#1976) (Tuesday, 26 September)
Re: [webauthn] Extend WebAuthn spec to support interoperability in WebExtensions (#1766) (Thursday, 21 September)
Re: [webauthn] Extend WebAuthn spec to support interoperability in WebExtensions (#1766) (Thursday, 21 September)
Re: [webauthn] Code Injection vulnerability from client side (#1965) (Monday, 18 September)
Re: [webauthn] Code Injection vulnerability from client side (#1965) (Saturday, 16 September)
Re: [webauthn] PublicKeyCredentialJSON is an invalid WebIDL construct (#1958) (Monday, 11 September)
Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Wednesday, 6 September)
Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Tuesday, 5 September)
Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Tuesday, 5 September)

BagelTap via GitHub

Re: [webauthn] Code Injection vulnerability from client side (#1965) (Saturday, 23 September)

bobknowscode via GitHub

Re: [webauthn] Further clarification of Unsigned Extension Outputs (#1964) (Thursday, 14 September)
[webauthn] Further clarification of Unsigned Extension Outputs (#1964) (Thursday, 14 September)

David Waite via GitHub

Re: [webauthn] Extend WebAuthn spec to support interoperability in WebExtensions (#1766) (Thursday, 21 September)
Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Monday, 11 September)
Re: [webauthn] Cleanup when creating discoverable credentials with attestations (#1560) (Saturday, 9 September)

Emil Lundberg

[w3c/webauthn] (Wednesday, 6 September)
[w3c/webauthn] c22e09: Merge pull request #1955 from w3c/issue-1794-broke... (Wednesday, 6 September)
[w3c/webauthn] (Wednesday, 6 September)
[w3c/webauthn] f6bbe7: Remove outdated spec reference anchors (Wednesday, 6 September)
[w3c/webauthn] d3325e: Singularize "implementation of each of [methods]" (Wednesday, 6 September)

Emil Lundberg via GitHub

Re: [webauthn] Add packed attestation optional firmware version attribute (#1953) (Friday, 29 September)
Re: [webauthn] Code Injection vulnerability from client side (#1965) (Thursday, 28 September)
Re: [webauthn] Code Injection vulnerability from client side (#1965) (Thursday, 28 September)
Re: [webauthn] Add importCryptoKey input to PRF extension (#1945) (Wednesday, 20 September)
Re: [webauthn] Code Injection vulnerability from client side (#1965) (Monday, 18 September)
Re: [webauthn] Add support for SRP (or some other PAKE) in WebAuthn (#1960) (Monday, 11 September)
Re: [webauthn] Could not use Webauthn `PublicKeyCredential.create` when the RP ID is a Host string(ip). (#1358) (Friday, 8 September)
Re: [webauthn] Add importCryptoKey input to PRF extension (#1945) (Wednesday, 6 September)
Re: [webauthn] [Meta] Hard-code HKDF in PRF importCryptoKey (#1946) (Wednesday, 6 September)
[webauthn] Closed Pull Request: [Meta] Hard-code HKDF in PRF importCryptoKey (Wednesday, 6 September)
Closed: [webauthn] Broken references in Web Authentication: An API for accessing Public Key Credentials - Level (#1794) (Wednesday, 6 September)
[webauthn] new commits pushed by emlun (Wednesday, 6 September)
[webauthn] Merged Pull Request: Fix broken spec references (Wednesday, 6 September)
[webauthn] new commits pushed by emlun (Wednesday, 6 September)

Felix Magedanz via GitHub

Re: [webauthn] Extend WebAuthn spec to support interoperability in WebExtensions (#1766) (Thursday, 21 September)

Firstyear via GitHub

Re: [webauthn] Code Injection vulnerability from client side (#1965) (Monday, 25 September)
Re: [webauthn] Cleanup when creating discoverable credentials with attestations (#1560) (Tuesday, 12 September)
Closed: [webauthn] Add support for SRP (or some other PAKE) in WebAuthn (#1960) (Friday, 8 September)
Re: [webauthn] Add support for SRP (or some other PAKE) in WebAuthn (#1960) (Friday, 8 September)

Fredrik Tolf via GitHub

Re: [webauthn] Add support for SRP (or some other PAKE) in WebAuthn (#1960) (Friday, 8 September)
[webauthn] Add support for SRP (or some other PAKE) in WebAuthn (#1960) (Friday, 8 September)

github-actions[bot] via GitHub

[webauthn] new commits pushed by github-actions[bot] (Wednesday, 27 September)
[webauthn] new commits pushed by github-actions[bot] (Wednesday, 27 September)
[webauthn] new commits pushed by github-actions[bot] (Wednesday, 20 September)
[webauthn] new commits pushed by github-actions[bot] (Tuesday, 12 September)
[webauthn] new commits pushed by github-actions[bot] (Tuesday, 12 September)
[webauthn] new commits pushed by github-actions[bot] (Tuesday, 12 September)
[webauthn] new commits pushed by github-actions[bot] (Wednesday, 6 September)

James Hanks via GitHub

Re: [webauthn] Could not use Webauthn `PublicKeyCredential.create` when the RP ID is a Host string(ip). (#1358) (Friday, 8 September)

John Bradley via GitHub

Re: [webauthn] Code Injection vulnerability from client side (#1965) (Sunday, 17 September)
Re: [webauthn] Code Injection vulnerability from client side (#1965) (Sunday, 17 September)
Re: [webauthn] Code Injection vulnerability from client side (#1965) (Saturday, 16 September)
Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Monday, 11 September)
Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Tuesday, 5 September)

John Schanck via GitHub

[webauthn] Remove the [SameObject] attribute from PublicKeyCredential::authenticatorAttachment (#1977) (Wednesday, 27 September)
[webauthn] Extensions should specify partial dictionaries that modify AuthenticationExtensionsClient{Inputs, Outputs}JSON (#1968) (Wednesday, 20 September)

Ki-Eun Shin via GitHub

Re: [webauthn] Make the default value for the attestation member in assertion options be null (#1972) (Saturday, 30 September)
[webauthn] Pull Request: Add myself to the contributors (Friday, 22 September)
[webauthn] Pull Request: Make the default value for the attestation member in assertion options be null (Friday, 22 September)
Closed: [webauthn] Specify authenticator attachment for authentication operation (#1267) (Tuesday, 19 September)
Re: [webauthn] Specify authenticator attachment for authentication operation (#1267) (Tuesday, 19 September)

Kyle Den Hartog

Question regarding PRF extension (Wednesday, 6 September)

Lucas Garron via GitHub

Re: [webauthn] Prevent browsers from deleting credentials that the RP wanted to be server-side (#1569) (Tuesday, 12 September)

Matthew Miller

[w3c/webauthn] 405b7d: Merge pull request #1973 from Kieun/add-myself-as-... (Wednesday, 27 September)
[w3c/webauthn] 3d2a59: Add myself to the contributors (Wednesday, 27 September)
[w3c/webauthn] 8af038: Swap out union type for object w/comment (Wednesday, 20 September)
[w3c/webauthn] a4b8cd: Merge pull request #1932 from w3c/1852-emphasize-u... (Tuesday, 12 September)
[w3c/webauthn] (Tuesday, 12 September)
[w3c/webauthn] ec9dd1: Emphasize user.name as primary identifier (Tuesday, 12 September)
[w3c/webauthn] aefe8f: Tweak examples based on feedback (Wednesday, 6 September)

Matthew Miller via GitHub

Re: [webauthn] Fix broken PublicKeyCredentialJSON WebIDL definition (#1969) (Wednesday, 27 September)
[webauthn] new commits pushed by MasterKale (Wednesday, 27 September)
[webauthn] Merged Pull Request: Add myself to the contributors (Wednesday, 27 September)
Re: [webauthn] Initial text for conditional create (#1951) (Monday, 25 September)
Re: [webauthn] [Superset] Updating credential metadata and requesting deletion of stale credentials (#1967) (Monday, 25 September)
[webauthn] Pull Request: Fix broken PublicKeyCredentialJSON WebIDL definition (Wednesday, 20 September)
[webauthn] new commits pushed by MasterKale (Wednesday, 20 September)
Re: [webauthn] Prevent browsers from deleting credentials that the RP wanted to be server-side (#1569) (Tuesday, 12 September)
Closed: [webauthn] Recovering from Device Loss (#931) (Tuesday, 12 September)
Re: [webauthn] Recovering from Device Loss (#931) (Tuesday, 12 September)
Re: [webauthn] PublicKeyCredentialJSON is an invalid WebIDL construct (#1958) (Tuesday, 12 September)
Re: [webauthn] Proposal/discussion: non-extractable CryptoKey output from the prf extension (#1895) (Tuesday, 12 September)
Closed: [webauthn] Emphasize use of `user.name` for RP's to help users distinguish credentials (#1852) (Tuesday, 12 September)
[webauthn] new commits pushed by MasterKale (Tuesday, 12 September)
[webauthn] Merged Pull Request: Clarify distinction between PublicKeyCredentialUserEntity name and displayName (Tuesday, 12 September)
Re: [webauthn] Add importCryptoKey input to PRF extension (#1945) (Tuesday, 12 September)
Re: [webauthn] PublicKeyCredentialJSON is an invalid WebIDL construct (#1958) (Monday, 11 September)
Re: [webauthn] Initial text for conditional create (#1951) (Wednesday, 6 September)
[webauthn] new commits pushed by MasterKale (Wednesday, 6 September)

Max Hata via GitHub

Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Tuesday, 5 September)
Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Monday, 4 September)

Michael B. Jones via GitHub

Re: [webauthn] PublicKeyCredentialParameters can't select curve (E.g. ed448) (#1446) (Tuesday, 12 September)
Re: [webauthn] reference CTAP2.1 PS spec and fix broken link (#1635) (Tuesday, 12 September)
Re: [webauthn] Add a way to use webauthn without Javascript (#1255) (Tuesday, 12 September)
[webauthn] Pull Request: Reference CTAP 2.1 Proposed Standard (Monday, 11 September)

micolous via GitHub

Re: [webauthn] Code Injection vulnerability from client side (#1965) (Tuesday, 26 September)

nadalin@prodigy.net

09/27/2023 W3C Web Authentication Meeting (Wednesday, 27 September)
09/20/2023 W3C Web Authentication Meeting (Wednesday, 20 September)
09/06/2023 W3C Web Authentication Meeting (Wednesday, 6 September)

Nick Steele

[w3c/webauthn] c7de61: update and link to working AAGUID definition (Wednesday, 20 September)
[w3c/webauthn] (Tuesday, 12 September)
[w3c/webauthn] 7ad822: Merge pull request #1944 from w3c/prf-always-uv (Tuesday, 12 September)
[w3c/webauthn] ff7634: Revert "Delete outdated note about checking regist... (Tuesday, 12 September)
[w3c/webauthn] (Tuesday, 12 September)
[w3c/webauthn] 7b877b: Delete outdated note about checking registration U... (Tuesday, 12 September)

Nick Steele via GitHub

[webauthn] Pull Request: update and link to working AAGUID definition (Wednesday, 20 September)
[webauthn] new commits pushed by nicksteele (Wednesday, 20 September)
[webauthn] new commits pushed by nicksteele (Tuesday, 12 September)
[webauthn] new commits pushed by nicksteele (Tuesday, 12 September)
[webauthn] Merged Pull Request: Delete outdated note about checking registration UV with PRF extension (Tuesday, 12 September)

Nina Satragno via GitHub

Re: [webauthn] Should credentials requested with attestation=none include an AAGUID? (#1962) (Tuesday, 12 September)

Pascoe

[w3c/webauthn] 952de8: Merge pull request #1975 from pascoej/fix-bikeshed... (Wednesday, 27 September)
[w3c/webauthn] 4207bd: When installing the newest version of bikeshed, th... (Wednesday, 27 September)

Pascoe via GitHub

Closed: [webauthn] The bike shed build is broken with the newest version (#1974) (Wednesday, 27 September)
[webauthn] new commits pushed by pascoej (Wednesday, 27 September)
[webauthn] Merged Pull Request: Fix the bikeshed build (Wednesday, 27 September)
[webauthn] Pull Request: Fix the bikeshed build (Friday, 22 September)
[webauthn] The bike shed build is broken with the newest version (#1974) (Friday, 22 September)
Re: [webauthn] Should credentials requested with attestation=none include an AAGUID? (#1962) (Tuesday, 12 September)
[webauthn] Should credentials requested with attestation=none include an AAGUID (#1962) (Tuesday, 12 September)
Re: [webauthn] Initial text for conditional create (#1951) (Monday, 11 September)

Peter Van der Beken via GitHub

[webauthn] PublicKeyCredentialJSON is an invalid WebIDL construct (#1958) (Wednesday, 6 September)

Philippe Le Hegaret

[w3c/webauthn] fa2889: Tweaks for bikeshed (Wednesday, 27 September)

Philippe Le Hegaret via GitHub

[webauthn] Are notes in webauthn normative or informative? (#1979) (Wednesday, 27 September)
[webauthn] Pull Request: Tweaks for bikeshed (Wednesday, 27 September)
[webauthn] new commits pushed by plehegar (Wednesday, 27 September)

Rew Islam via GitHub

Re: [webauthn] Code Injection vulnerability from client side (#1965) (Tuesday, 26 September)
Re: [webauthn] Extend WebAuthn spec to support interoperability in WebExtensions (#1766) (Thursday, 21 September)
Re: [webauthn] Extend WebAuthn spec to support interoperability in WebExtensions (#1766) (Thursday, 21 September)
Re: [webauthn] Should credentials requested with attestation=none include an AAGUID? (#1962) (Tuesday, 19 September)

Rolf Lindemann via GitHub

Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Monday, 11 September)

Shane Weeden via GitHub

Re: [webauthn] devicePubKey → supplementalPubKeys (#1957) (Monday, 11 September)
Re: [webauthn] Add packed attestation optional firmware version attribute (#1953) (Wednesday, 6 September)

Thomas Duboucher via GitHub

Re: [webauthn] Code Injection vulnerability from client side (#1965) (Saturday, 16 September)

Tim Cappalli

[w3c/webauthn] 53e8d8: Incorporate Emil's changes (Friday, 29 September)
[w3c/webauthn] b5a7fc: add for (Wednesday, 20 September)
[w3c/webauthn] ed80f7: address Mike's comment about IANA reference (Wednesday, 20 September)
[w3c/webauthn] 36951f: rouge word (Tuesday, 19 September)
[w3c/webauthn] 9bd2a6: add must have two or more (Tuesday, 19 September)
[w3c/webauthn] 21ae2d: any attestation type in spec (Monday, 18 September)
[w3c/webauthn] b88e3f: Merge pull request #1961 from selfissued/mbj-refer... (Tuesday, 12 September)
[w3c/webauthn] efe2c2: Reference CTAP 2.1 Proposed Standard (Tuesday, 12 September)
[w3c/webauthn] 699e9d: add conditional-create (Thursday, 7 September)
[w3c/webauthn] 5c39e1: spelling (Thursday, 7 September)
[w3c/webauthn] 1fe917: add SecureContext to result (Wednesday, 6 September)
[w3c/webauthn] 244b54: missing quote (Wednesday, 6 September)
[w3c/webauthn] 633a2d: first stab at new approach for getClientCapabilities (Wednesday, 6 September)
[w3c/webauthn] 3f576e: add validation failure text (Wednesday, 6 September)

Tim Cappalli via GitHub

[webauthn] new commits pushed by timcappalli (Friday, 29 September)
[webauthn] new commits pushed by timcappalli (Wednesday, 20 September)
[webauthn] new commits pushed by timcappalli (Wednesday, 20 September)
[webauthn] new commits pushed by timcappalli (Tuesday, 19 September)
[webauthn] new commits pushed by timcappalli (Tuesday, 19 September)
Re: [webauthn] FIDO credential decommissioning (#1696) (Tuesday, 19 September)
Closed: [webauthn] FIDO credential decommissioning (#1696) (Tuesday, 19 September)
Closed: [webauthn] Personal information updates & webauthn (#1456) (Tuesday, 19 September)
Re: [webauthn] Personal information updates & webauthn (#1456) (Tuesday, 19 September)
Closed: [webauthn] Facility for an RP to indicate a change of displayName to a discoverable credential (#1779) (Tuesday, 19 September)
Re: [webauthn] Facility for an RP to indicate a change of displayName to a discoverable credential (#1779) (Tuesday, 19 September)
Closed: [webauthn] Cleanup when creating discoverable credentials with attestations (#1560) (Tuesday, 19 September)
Re: [webauthn] Cleanup when creating discoverable credentials with attestations (#1560) (Tuesday, 19 September)
[webauthn] [Superset] Updating credential metadata and requesting deletion of stale credentials (#1967) (Tuesday, 19 September)
Re: [webauthn] Specify authenticator attachment for authentication operation (#1267) (Tuesday, 19 September)
[webauthn] new commits pushed by timcappalli (Monday, 18 September)
Re: [webauthn] Could not use Webauthn `PublicKeyCredential.create` when the RP ID is a Host string(ip). (#1358) (Wednesday, 13 September)
Closed: [webauthn] Making PublicKeyCredentialDescriptor.transports mandatory (#1522) (Tuesday, 12 September)
Re: [webauthn] Making PublicKeyCredentialDescriptor.transports mandatory (#1522) (Tuesday, 12 September)
Closed: [webauthn] add feature detection blurb... (#1208) (Tuesday, 12 September)
Re: [webauthn] add feature detection blurb... (#1208) (Tuesday, 12 September)
Closed: [webauthn] think about adding note wrt how client platform might obtain authenticator capabilities (#1207) (Tuesday, 12 September)
Re: [webauthn] think about adding note wrt how client platform might obtain authenticator capabilities (#1207) (Tuesday, 12 September)
[webauthn] new commits pushed by timcappalli (Tuesday, 12 September)
[webauthn] Merged Pull Request: Reference CTAP 2.1 Proposed Standard (Tuesday, 12 September)
[webauthn] new commits pushed by timcappalli (Thursday, 7 September)
[webauthn] new commits pushed by timcappalli (Thursday, 7 September)
Re: [webauthn] Add `compound` attestation format (#1950) (Wednesday, 6 September)
Re: [webauthn] Add new getClientCapabilities method (#1923) (Wednesday, 6 September)
Re: [webauthn] Add new getClientCapabilities method (#1923) (Wednesday, 6 September)
[webauthn] new commits pushed by timcappalli (Wednesday, 6 September)
[webauthn] new commits pushed by timcappalli (Wednesday, 6 September)
[webauthn] new commits pushed by timcappalli (Wednesday, 6 September)
[webauthn] new commits pushed by timcappalli (Wednesday, 6 September)

W3C Bot via GitHub

Re: [webauthn] Add myself to the contributors (#1973) (Friday, 22 September)
Re: [webauthn] update and link to working AAGUID definition (#1970) (Wednesday, 20 September)
Re: [webauthn] Specify what an unknown type credential descriptor being ignored means (#1966) (Monday, 18 September)

W3C Webmaster via GitHub API

Weekly github digest (WebAuthn) (Tuesday, 26 September)
Weekly github digest (WebAuthn) (Tuesday, 19 September)
Weekly github digest (WebAuthn) (Tuesday, 12 September)
Weekly github digest (WebAuthn) (Tuesday, 5 September)

Zhenjie Li (W3C Calendar)

Event Invitation: Web Authentication WG (Friday, 1 September)
Event Invitation: Web Payments WG (Friday, 1 September)
Event Invitation: Web Authentication WG (Friday, 1 September)
Event Invitation: Web Payments WG (Friday, 1 September)

李林哲 via GitHub

Re: [webauthn] Could not use Webauthn `PublicKeyCredential.create` when the RP ID is a Host string(ip). (#1358) (Wednesday, 13 September)
Re: [webauthn] Could not use Webauthn `PublicKeyCredential.create` when the RP ID is a Host string(ip). (#1358) (Wednesday, 13 September)

Last message date: Saturday, 30 September 2023 00:49:23 UTC