Wednesday, 31 January 2024
- Re: [webauthn] Initial text for conditional create (#1951)
- Re: [webauthn] Should an RP be able to provide finer grained authenticator filtering in attestation options? (#1688)
- Re: [webauthn] Allow conditional and modal flows to run simultaneously (#1854)
- Closed: [webauthn] Allow conditional and modal flows to run simultaneously (#1854)
- Re: [webauthn] Proposal/discussion: non-extractable CryptoKey output from the prf extension (#1895)
- Closed: [webauthn] Proposal/discussion: non-extractable CryptoKey output from the prf extension (#1895)
- Re: [webauthn] Misaligned steps in Section 7.2 (#1913)
- Re: [webauthn] Should credentials requested with attestation=none include an AAGUID? (#1962)
- Re: [webauthn] Remove isPPAA() and expand getClientCapabilities() (#1937)
- Closed: [webauthn] Remove isPPAA() and expand getClientCapabilities() (#1937)
- Re: [webauthn] Ambiguous instructions in the Android Key Attestation Statement Format verification procedure (#1980)
- Re: [webauthn] Conditional UI support by WebAuthn WebDriver Extension (#2010)
- Closed: [webauthn] Conditional UI support by WebAuthn WebDriver Extension (#2010)
- Re: [webauthn] Clarify TPM attestation verification instructions (#1926)
- Re: [webauthn] Add packed attestation optional firmware version attribute (#1953)
- Re: [webauthn] Fix references to reserved tokenBinding member (#2014)
- 01/31/2024 W3C Web Authentication Meeting
Tuesday, 30 January 2024
- Re: [webauthn] Should an RP be able to provide finer grained authenticator filtering in attestation options? (#1688)
- Re: [webauthn] Should an RP be able to provide finer grained authenticator filtering in attestation options? (#1688)
- Weekly github digest (WebAuthn)
- Re: [webauthn] Should an RP be able to provide finer grained authenticator filtering in attestation options? (#1688)
Monday, 29 January 2024
- [webauthn] Pull Request: Adding example of secure context origin, localhost
- Re: [webauthn] Adding flexibility in client origin scheme validation to align with real world implementations (#2018)
- Re: [webauthn] Adding flexibility in client origin scheme validation to align with real world implementations (#2018)
- [webauthn] Pull Request: Adding flexibility in client origin scheme validation to align with real world implementations
Wednesday, 24 January 2024
- Re: [webauthn] Conditional UI support by WebAuthn WebDriver Extension (#2010)
- Re: [webauthn] Ambiguous instructions in the Android Key Attestation Statement Format verification procedure (#1980)
- Closed: [webauthn] Refine JSON serialization to use UTF-8 encoding for `user.id` and `userHandle` (#2013)
- [w3c/webauthn] 51faa8: Merge pull request #2012 from w3c/uxo
- [webauthn] new commits pushed by github-actions[bot]
- [w3c/webauthn] 46a3d5: Expand upon the definition of "unsigned extension ...
- Closed: [webauthn] Further clarification of Unsigned Extension Outputs (#1964)
- [webauthn] Merged Pull Request: Expand upon the definition of "unsigned extension outputs"
- [webauthn] new commits pushed by agl
- Re: [webauthn] Discussing mechanisms for enterprise RP's to enforce bound properties of credentials (#1739)
- Re: [webauthn] Clarify how to differentiate between exceptions (#1859)
- 01/24/2024 W3C Web Authentication Meeting
Tuesday, 23 January 2024
- Weekly github digest (WebAuthn)
- Re: [webauthn] Clarify how to differentiate between exceptions (#1859)
Monday, 22 January 2024
- [w3c/webauthn] bdb2da: Apply suggestions from review
- [webauthn] new commits pushed by emlun
- [w3c/webauthn] fbb72d: Apply suggestions from review
- [webauthn] new commits pushed by emlun
Friday, 19 January 2024
- Re: [webauthn] credentialRecord.transports has no purpose (#2016)
- Re: [webauthn] Misaligned steps in Section 7.2 (#1913)
- Re: [webauthn] Misaligned steps in Section 7.2 (#1913)
- [webauthn] Pull Request: Explicitly specify binary encoding for string truncation
- [w3c/webauthn] 3361ef: Explicitly specify binary encoding for string trun...
- [webauthn] new commits pushed by emlun
- Re: [webauthn] credentialRecord.transports has no purpose (#2016)
- Re: [webauthn] credentialRecord.transports has no purpose (#2016)
- Re: [webauthn] credentialRecord.transports has no purpose (#2016)
- Re: [webauthn] credentialRecord.transports has no purpose (#2016)
- [webauthn] credentialRecord.transports has no purpose (#2016)
Wednesday, 17 January 2024
Tuesday, 16 January 2024
- Event Canceled: Web Authentication weekly
- 01/17/2024 W3C Web Authentication Meeting - CANCELLED
- Weekly github digest (WebAuthn)
- Re: [webauthn] Refine JSON serialization to use UTF-8 encoding for `user.id` and `userHandle` (#2013)
Thursday, 11 January 2024
Wednesday, 10 January 2024
- Re: [webauthn] Refine JSON serialization to use UTF-8 encoding for `user.id` and `userHandle` (#2013)
- Re: [webauthn] Clarify browser behavior when an authenticators return equivalent of "InvalidStateError" (#1888)
- Closed: [webauthn] Clarify browser behavior when an authenticators return equivalent of "InvalidStateError" (#1888)
- Re: [webauthn] [[preventSilentAccess]] seems incorrect (#1956)
- Closed: [webauthn] [[preventSilentAccess]] seems incorrect (#1956)
- [w3c/webauthn] 06a34c: Merge pull request #2015 from w3c/fix-lint
- [webauthn] new commits pushed by github-actions[bot]
- [w3c/webauthn] 8f8c7e: Apply suggestion.
- [webauthn] new commits pushed by agl
- [w3c/webauthn]
- [w3c/webauthn] 2b9add: Remove autolink to nonexistent term "WebAuthn cred...
- [webauthn] new commits pushed by emlun
- [webauthn] Merged Pull Request: Fix Bikeshed lint
- [w3c/webauthn] 45e274: Merge pull request #1997 from w3c/noatt
- Closed: [webauthn] The default value of `attestation` member in `PublicKeyCredentialRequestOptions` should be null or must not have default value (#1941)
- Re: [webauthn] The default value of `attestation` member in `PublicKeyCredentialRequestOptions` should be null or must not have default value (#1941)
- [webauthn] new commits pushed by github-actions[bot]
- [webauthn] Closed Pull Request: Make the default value for the attestation member in assertion options be null
- Re: [webauthn] Make the default value for the attestation member in assertion options be null (#1972)
- [w3c/webauthn]
- [w3c/webauthn] 15dad7: Drop assertion-time attestation.
- [w3c/webauthn] 3f028e: Merge pull request #2009 from w3c/mm/2007-fix-gith...
- [webauthn] Merged Pull Request: Drop assertion-time attestation.
- [webauthn] new commits pushed by agl
- [w3c/webauthn] 7e66ae: Merge pull request #2011 from w3c/spkrequired
- [webauthn] new commits pushed by github-actions[bot]
- [webauthn] new commits pushed by github-actions[bot]
- [w3c/webauthn]
- [w3c/webauthn] 9bd286: Correct capitalization on "Github"
- [w3c/webauthn] 04f96b: Merge pull request #1923 from w3c/tc-clientfeatmethod
- Closed: [webauthn] Consider replacing "Github" with "GitHub" (#2007)
- [webauthn] new commits pushed by MasterKale
- [webauthn] Merged Pull Request: Correct capitalization on "Github"
- [webauthn] new commits pushed by github-actions[bot]
- [w3c/webauthn]
- [w3c/webauthn] 296ca5: Mark SPK's `signatures` output as required.
- [webauthn] new commits pushed by agl
- [webauthn] Merged Pull Request: Mark SPK's `signatures` output as required.
- [w3c/webauthn]
- [w3c/webauthn] 4cc067: add getClientCapabilites method and enum
- [webauthn] new commits pushed by MasterKale
- [webauthn] Merged Pull Request: Add new getClientCapabilities method
- Re: [webauthn] Refine JSON serialization to use UTF-8 encoding for `user.id` and `userHandle` (#2013)
- Re: [webauthn] Refine JSON serialization to use UTF-8 encoding for `user.id` and `userHandle` (#2013)
- RE: 01/10/2024 W3C Web Authentication Meeting
- Re: [webauthn] Refine JSON serialization to use UTF-8 encoding for `user.id` and `userHandle` (#2013)
- Re: [webauthn] Refine JSON serialization to use UTF-8 encoding for `user.id` and `userHandle` (#2013)
- Re: [webauthn] Refine JSON serialization to use UTF-8 encoding for `user.id` and `userHandle` (#2013)
- [webauthn] Pull Request: Fix Bikeshed lint
- [w3c/webauthn] 2b9add: Remove autolink to nonexistent term "WebAuthn cred...
- [webauthn] new commits pushed by emlun
- [w3c/webauthn] 281408: Fix references to reserved tokenBinding member
- [webauthn] new commits pushed by emlun
- [webauthn] Pull Request: Fix references to reserved tokenBinding member
- [w3c/webauthn] 7650f7: Fix references to reserved tokenBinding member
- [webauthn] new commits pushed by emlun
- [w3c/webauthn] a0cfb6: Delete reference to {{AuthenticatorAttestationResp...
- [webauthn] new commits pushed by emlun
- Re: [webauthn] Refine JSON serialization to use UTF-8 encoding for `user.id` and `userHandle` (#2013)
- Re: [webauthn] Refine JSON serialization to use UTF-8 encoding for `user.id` and `userHandle` (#2013)
- Re: [webauthn] Refine JSON serialization to use UTF-8 encoding for `user.id` and `userHandle` (#2013)
- [webauthn] Refine JSON serialization to use UTF-8 encoding for `user.id` and `userHandle` (#2013)
Tuesday, 9 January 2024
- [webauthn] Pull Request: Expand upon the definition of "unsigned extension outputs"
- [w3c/webauthn] 46a3d5: Expand upon the definition of "unsigned extension ...
- [webauthn] new commits pushed by agl
- 01/10/2024 W3C Web Authentication Meeting
- [w3c/webauthn] ef5438: Allow clients to omit capabilities
- [webauthn] new commits pushed by MasterKale
- [w3c/webauthn] f6d2eb: Restore mandate to sort capabilities
- [webauthn] new commits pushed by MasterKale
- Weekly github digest (WebAuthn)
Monday, 8 January 2024
- [w3c/webauthn] ee7990: Add link to Disclocing Client Capabilities section
- [webauthn] new commits pushed by MasterKale
- Re: [webauthn] Cambios por abuso (#2006)
- [w3c/webauthn] 8ea1d6: clarification that client always sends extension t...
- [webauthn] new commits pushed by rlin1
- [w3c/webauthn]
- [w3c/webauthn] def236: Reference CTAP 2.1 errata spec
- [webauthn] new commits pushed by rlin1
- [w3c/webauthn] 890cae: .
- [webauthn] new commits pushed by rlin1
Friday, 5 January 2024
Thursday, 4 January 2024
Wednesday, 3 January 2024
- Re: [webauthn] Add new getClientCapabilities method (#1923)
- [w3c/webauthn] b0fdc6: Switch to a typedef
- [webauthn] new commits pushed by MasterKale
- [w3c/webauthn] 4969d2: Prune readonly from record
- [webauthn] new commits pushed by MasterKale
- [w3c/webauthn] bda342: Merge pull request #1 from w3c/master
- [webauthn] new commits pushed by MasterKale
- Re: [webauthn] Better specify what an unknown type credential descriptor being ignored means (#1748)
- Closed: [webauthn] Better specify what an unknown type credential descriptor being ignored means (#1748)
- Re: [webauthn] Enterprise attestaion is a bool in WebAuthn and an Int in CTAP2.1 (#1795)
- Re: [webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942)
- Closed: [webauthn] make username fields optional (do not delete them, but do not force their usage, either, which is hostile against usernameless services) (#1942)
- Re: [webauthn] Indicate that the credential could be backed up and restored, but not synchronized (#1933)
- Closed: [webauthn] Indicate that the credential could be backed up and restored, but not synchronized (#1933)
- Re: [webauthn] Add packed attestation optional firmware version attribute (#1953)
- [w3c/webauthn]
- [w3c/webauthn] 872589: Add packed attestation descriotion of the firmware...
- [webauthn] new commits pushed by dwaite
Tuesday, 2 January 2024
- 01/03/2024 W3C Web Authentication Meeting
- [webauthn] Pull Request: Mark SPK's `signatures` output as required.
- [w3c/webauthn] 296ca5: Mark SPK's `signatures` output as required.
- [webauthn] new commits pushed by agl
- [w3c/webauthn] cc1a9b: Extract recommended timeout ranges and defaults to...
- [webauthn] new commits pushed by agl
- Weekly github digest (WebAuthn)