[w3c/webauthn] 2a653d: Added a loophole for secure contexts not using https

  Branch: refs/heads/main
  Home:   https://github.com/w3c/webauthn
  Commit: 2a653decc794850743bb149fd919c81c10614b04
      https://github.com/w3c/webauthn/commit/2a653decc794850743bb149fd919c81c10614b04
  Author: Anders Åberg <anders@andersaberg.com>
  Date:   2024-01-29 (Mon, 29 Jan 2024)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Added a loophole for secure contexts not using https

Clients today want to allow localhost on http, but are forbidden by spec due to scheme validation


  Commit: 66b792ddf2b69e4a074d226d77538de9e3c1fb49
      https://github.com/w3c/webauthn/commit/66b792ddf2b69e4a074d226d77538de9e3c1fb49
  Author: Anders Åberg <anders@andersaberg.com>
  Date:   2024-01-29 (Mon, 29 Jan 2024)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Fixed bikeshedding


  Commit: 84055e6097dba51a331319078e3e8a4722858967
      https://github.com/w3c/webauthn/commit/84055e6097dba51a331319078e3e8a4722858967
  Author: Anders Åberg <anders@andersaberg.com>
  Date:   2024-01-29 (Mon, 29 Jan 2024)

  Changed paths:

  Log Message:
  -----------
  Trigger Build


  Commit: b4ce93ef1cd5e1da1862753bc60ad4ea691ed1c3
      https://github.com/w3c/webauthn/commit/b4ce93ef1cd5e1da1862753bc60ad4ea691ed1c3
  Author: Anders Åberg <anders@andersaberg.com>
  Date:   2024-01-29 (Mon, 29 Jan 2024)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  remove pluralisation

Co-authored-by: Emil Lundberg <emil@emlun.se>


  Commit: 85d28a3dc985e874c6a77356ac7629289ecfd7c6
      https://github.com/w3c/webauthn/commit/85d28a3dc985e874c6a77356ac7629289ecfd7c6
  Author: Anders Åberg <anders@andersaberg.com>
  Date:   2024-02-14 (Wed, 14 Feb 2024)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Changed wording to spell out localhost


  Commit: ec161c4c2810a9b884d0b6cc756689fbdd7c9cd4
      https://github.com/w3c/webauthn/commit/ec161c4c2810a9b884d0b6cc756689fbdd7c9cd4
  Author: Anders Åberg <anders@andersaberg.com>
  Date:   2024-02-14 (Wed, 14 Feb 2024)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Editorial tweaks and links


  Commit: 9f8fa53883e4a36933e1241653535d656844e11f
      https://github.com/w3c/webauthn/commit/9f8fa53883e4a36933e1241653535d656844e11f
  Author: Anders Åberg <anders@andersaberg.com>
  Date:   2024-02-14 (Wed, 14 Feb 2024)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  missed one


  Commit: 3c71812cfb6f2e295e9ea42e2ede9529820784b4
      https://github.com/w3c/webauthn/commit/3c71812cfb6f2e295e9ea42e2ede9529820784b4
  Author: Nick Steele <344821+nicksteele@users.noreply.github.com>
  Date:   2024-02-21 (Wed, 21 Feb 2024)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Merge pull request #2018 from abergs/non-https-loophole

Adding flexibility in client origin scheme validation to align with real world implementations


Compare: https://github.com/w3c/webauthn/compare/bfe8f632aa7e...3c71812cfb6f

To unsubscribe from these emails, change your notification settings at https://github.com/w3c/webauthn/settings/notifications

Received on Wednesday, 21 February 2024 20:24:16 UTC