- From: Tim Cappalli <noreply@github.com>
- Date: Thu, 18 Dec 2025 11:24:42 -0800
- To: public-webauthn@w3.org
Branch: refs/heads/2338-cmtg
Home: https://github.com/w3c/webauthn
Commit: 831ec205f6d947e8d9435d9d5e2ba1557b3c08be
https://github.com/w3c/webauthn/commit/831ec205f6d947e8d9435d9d5e2ba1557b3c08be
Author: Matthew Miller <mmiller@duosecurity.com>
Date: 2025-02-11 (Tue, 11 Feb 2025)
Changed paths:
M index.bs
Log Message:
-----------
Define new `rpId` in Credential Record
Commit: 86b00533e9b3ff5afea709392d890f149bccc1ea
https://github.com/w3c/webauthn/commit/86b00533e9b3ff5afea709392d890f149bccc1ea
Author: Matthew Miller <mmiller@duosecurity.com>
Date: 2025-02-11 (Tue, 11 Feb 2025)
Changed paths:
M index.bs
Log Message:
-----------
Populate rpId during registration
Commit: 39960b54ef349a4991fc63722383e50ac59ae758
https://github.com/w3c/webauthn/commit/39960b54ef349a4991fc63722383e50ac59ae758
Author: Matthew Miller <mmiller@duosecurity.com>
Date: 2025-02-25 (Tue, 25 Feb 2025)
Changed paths:
M index.bs
Log Message:
-----------
Tweak potential use cases
Commit: cc478fbd35806e234a7fa8897fe18ffb4297d408
https://github.com/w3c/webauthn/commit/cc478fbd35806e234a7fa8897fe18ffb4297d408
Author: Matthew Miller <mmiller@duosecurity.com>
Date: 2025-02-25 (Tue, 25 Feb 2025)
Changed paths:
M index.bs
Log Message:
-----------
Open the door to more possibilities
Commit: 88620d8917e0d7c5f08a3f3ea58a9cdf84232f70
https://github.com/w3c/webauthn/commit/88620d8917e0d7c5f08a3f3ea58a9cdf84232f70
Author: Matthew Miller <mmiller@duosecurity.com>
Date: 2025-02-26 (Wed, 26 Feb 2025)
Changed paths:
M index.bs
Log Message:
-----------
Add a missing period
Co-authored-by: Emil Lundberg <emil@yubico.com>
Commit: 6e3c6a7aabdfdff9b9823b9c7cddf3bdc8ce17a8
https://github.com/w3c/webauthn/commit/6e3c6a7aabdfdff9b9823b9c7cddf3bdc8ce17a8
Author: Matthew Miller <mmiller@duosecurity.com>
Date: 2025-08-27 (Wed, 27 Aug 2025)
Changed paths:
M .github/ISSUE_TEMPLATE/config.yml
A .github/workflows/check-test-vectors.yml
M README.md
M index.bs
A test-vectors/README.md
A test-vectors/inject-generated-content.sh
A test-vectors/poetry.lock
A test-vectors/pyproject.toml
A test-vectors/webauthn-prf-test-vectors.py
A test-vectors/webauthn-test-vectors.py
Log Message:
-----------
Merge branch 'main' into mm/#2257-add-rp-id-credential-record
Commit: d1f88ca2c5fd02bbfddf861580093d3a8a2cdf6c
https://github.com/w3c/webauthn/commit/d1f88ca2c5fd02bbfddf861580093d3a8a2cdf6c
Author: Emil Lundberg <emil@yubico.com>
Date: 2025-10-21 (Tue, 21 Oct 2025)
Changed paths:
M index.bs
M test-vectors/webauthn-test-vectors.py
Log Message:
-----------
Include base64url encoding of extra_client_data in test vectors
Fixes https://github.com/w3c/webauthn/issues/2345
Commit: 06672f2b3a9f769fe97d5698eb4c31db9908b150
https://github.com/w3c/webauthn/commit/06672f2b3a9f769fe97d5698eb4c31db9908b150
Author: Emil Lundberg <emil@yubico.com>
Date: 2025-10-21 (Tue, 21 Oct 2025)
Changed paths:
M index.bs
M test-vectors/webauthn-test-vectors.py
Log Message:
-----------
Recode test vectors to omit base64url padding
For consistency with the rest of the spec, which uses base64url without padding.
Commit: 952ac44a23c42d7771f0d0745acd855a8d664cec
https://github.com/w3c/webauthn/commit/952ac44a23c42d7771f0d0745acd855a8d664cec
Author: Emil Lundberg <emil@yubico.com>
Date: 2025-10-21 (Tue, 21 Oct 2025)
Changed paths:
M index.bs
M test-vectors/webauthn-test-vectors.py
Log Message:
-----------
Rename extra_client_data to extraData_random in test vectors
Commit: aa221780c5df9bd7629fc1d2cce32ce2ef207ba7
https://github.com/w3c/webauthn/commit/aa221780c5df9bd7629fc1d2cce32ce2ef207ba7
Author: Tim Cappalli <tim@cloudauth.dev>
Date: 2025-10-28 (Tue, 28 Oct 2025)
Changed paths:
M index.bs
Log Message:
-----------
typos
Commit: 06d2f79c1a06ef55c0238badad302cdc03a97349
https://github.com/w3c/webauthn/commit/06d2f79c1a06ef55c0238badad302cdc03a97349
Author: Tim Cappalli <tim@cloudauth.dev>
Date: 2025-10-29 (Wed, 29 Oct 2025)
Changed paths:
A .cspell/acronyms.txt
A .cspell/misc.txt
A .cspell/names.txt
A cspell.json
Log Message:
-----------
chore: Adds a CSpell configuration (#2353)
* add cspell config and dicts
* Update .cspell/names.txt
Co-authored-by: Nick Steele <344821+nicksteele@users.noreply.github.com>
---------
Co-authored-by: Nick Steele <344821+nicksteele@users.noreply.github.com>
Commit: 3006eff56d36586b8c91afa0f9e9c3aa4101a361
https://github.com/w3c/webauthn/commit/3006eff56d36586b8c91afa0f9e9c3aa4101a361
Author: Tim Cappalli <tim@cloudauth.dev>
Date: 2025-10-29 (Wed, 29 Oct 2025)
Changed paths:
M index.bs
Log Message:
-----------
Merge pull request #2354 from w3c/tc-typos
Fixes some typos
Commit: 0dbeb204c358daab4fdb756e8fe809413d586899
https://github.com/w3c/webauthn/commit/0dbeb204c358daab4fdb756e8fe809413d586899
Author: Emil Lundberg <emil@yubico.com>
Date: 2025-10-29 (Wed, 29 Oct 2025)
Changed paths:
M index.bs
Log Message:
-----------
Mention that test vectors may contain additional constants
Commit: d392f2364f0003fe643774fb1c279ef5f9371698
https://github.com/w3c/webauthn/commit/d392f2364f0003fe643774fb1c279ef5f9371698
Author: Emil Lundberg <emil@yubico.com>
Date: 2025-10-29 (Wed, 29 Oct 2025)
Changed paths:
M index.bs
Log Message:
-----------
Fold changes since L3WD2 into changes since L2
Closes #2302.
Commit: 8e4f5405037ef001f565333609c7eb34d4e8e4df
https://github.com/w3c/webauthn/commit/8e4f5405037ef001f565333609c7eb34d4e8e4df
Author: Tim Cappalli <tim@cloudauth.dev>
Date: 2025-10-29 (Wed, 29 Oct 2025)
Changed paths:
M index.bs
Log Message:
-----------
Adds addt'l recs for getCC privacy considerations
Commit: d474f5999baf4428b12ac7138dcd1d2a59bfcbf8
https://github.com/w3c/webauthn/commit/d474f5999baf4428b12ac7138dcd1d2a59bfcbf8
Author: Emil Lundberg <emil@yubico.com>
Date: 2025-10-29 (Wed, 29 Oct 2025)
Changed paths:
M index.bs
M test-vectors/webauthn-test-vectors.py
Log Message:
-----------
Merge pull request #2346 from w3c/test-vectors-extradata-base64
Include base64url encoding of extra_client_data in test vectors; regenerate without b64 padding
Commit: 29067c47f78a99837cdd1ff831cab5b8e6ed49e3
https://github.com/w3c/webauthn/commit/29067c47f78a99837cdd1ff831cab5b8e6ed49e3
Author: Emil Lundberg <emil@yubico.com>
Date: 2025-10-29 (Wed, 29 Oct 2025)
Changed paths:
M index.bs
Log Message:
-----------
Merge pull request #2356 from w3c/fold-l3-change-history
Fold changes since L3WD2 into changes since L2
Commit: 796b5d24a790807dbcd055df1551c33634de14ec
https://github.com/w3c/webauthn/commit/796b5d24a790807dbcd055df1551c33634de14ec
Author: Michael Jones <michael_b_jones@hotmail.com>
Date: 2025-11-12 (Wed, 12 Nov 2025)
Changed paths:
M index.bs
Log Message:
-----------
Reference RFC 9864 for fully-specified algorithms
Commit: 2ce576a8a94911c6406860692bf89cc8d215e856
https://github.com/w3c/webauthn/commit/2ce576a8a94911c6406860692bf89cc8d215e856
Author: Michael B. Jones <michael_b_jones@hotmail.com>
Date: 2025-11-12 (Wed, 12 Nov 2025)
Changed paths:
M index.bs
Log Message:
-----------
Merge pull request #2362 from w3c/mbj-RFC9864
Reference RFC 9864 for fully-specified algorithms
Commit: 3acdcc3806a808ff46c94b051eb83d12b9b71caf
https://github.com/w3c/webauthn/commit/3acdcc3806a808ff46c94b051eb83d12b9b71caf
Author: Tim Cappalli <tim@cloudauth.dev>
Date: 2025-11-24 (Mon, 24 Nov 2025)
Changed paths:
M index.bs
Log Message:
-----------
Merge pull request #2357 from w3c/2320-getcc-tweaks
Additional privacy recommendations for getClientCapabilities
Commit: 2a6d11cde4f6abe9734f084f4192602bcd2c6f8a
https://github.com/w3c/webauthn/commit/2a6d11cde4f6abe9734f084f4192602bcd2c6f8a
Author: Emil Lundberg <emil@yubico.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M index.bs
Log Message:
-----------
Delete inaccurate recommendation to abort on unfocus
Per discussion in https://github.com/w3c/webauthn/issues/2278
Commit: 9f7a60c6110ff325f391134c6c092af1acce6b28
https://github.com/w3c/webauthn/commit/9f7a60c6110ff325f391134c6c092af1acce6b28
Author: Emil Lundberg <emil@yubico.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M index.bs
Log Message:
-----------
Disambiguate [=success=] autolinks
Fixes the following Bikeshed lint:
```
LINE 7998:12: Multiple possible 'success' dfn refs.
Arbitrarily chose https://infra.spec.whatwg.org/#success
To auto-select one of the following refs, insert one of these lines into a <pre class=link-defaults> block:
spec:infra; type:dfn; text:success
spec:webdriver2; type:dfn; text:success
[=success=]
LINE 8027:12: Multiple possible 'success' dfn refs.
Arbitrarily chose https://infra.spec.whatwg.org/#success
To auto-select one of the following refs, insert one of these lines into a <pre class=link-defaults> block:
spec:infra; type:dfn; text:success
spec:webdriver2; type:dfn; text:success
[=success=]
LINE 8210:12: Multiple possible 'success' dfn refs.
Arbitrarily chose https://infra.spec.whatwg.org/#success
To auto-select one of the following refs, insert one of these lines into a <pre class=link-defaults> block:
spec:infra; type:dfn; text:success
spec:webdriver2; type:dfn; text:success
[=success=]
LINE 8242:12: Multiple possible 'success' dfn refs.
Arbitrarily chose https://infra.spec.whatwg.org/#success
To auto-select one of the following refs, insert one of these lines into a <pre class=link-defaults> block:
spec:infra; type:dfn; text:success
spec:webdriver2; type:dfn; text:success
[=success=]
LINE 8274:12: Multiple possible 'success' dfn refs.
Arbitrarily chose https://infra.spec.whatwg.org/#success
To auto-select one of the following refs, insert one of these lines into a <pre class=link-defaults> block:
spec:infra; type:dfn; text:success
spec:webdriver2; type:dfn; text:success
[=success=]
LINE 8303:12: Multiple possible 'success' dfn refs.
Arbitrarily chose https://infra.spec.whatwg.org/#success
To auto-select one of the following refs, insert one of these lines into a <pre class=link-defaults> block:
spec:infra; type:dfn; text:success
spec:webdriver2; type:dfn; text:success
[=success=]
LINE 8337:12: Multiple possible 'success' dfn refs.
Arbitrarily chose https://infra.spec.whatwg.org/#success
To auto-select one of the following refs, insert one of these lines into a <pre class=link-defaults> block:
spec:infra; type:dfn; text:success
spec:webdriver2; type:dfn; text:success
[=success=]
LINE 8406:12: Multiple possible 'success' dfn refs.
Arbitrarily chose https://infra.spec.whatwg.org/#success
To auto-select one of the following refs, insert one of these lines into a <pre class=link-defaults> block:
spec:infra; type:dfn; text:success
spec:webdriver2; type:dfn; text:success
[=success=]
```
Commit: 33f5b271f0914b370be373a2c21c3b6a467c3861
https://github.com/w3c/webauthn/commit/33f5b271f0914b370be373a2c21c3b6a467c3861
Author: Emil Lundberg <emil@yubico.com>
Date: 2025-12-10 (Wed, 10 Dec 2025)
Changed paths:
M index.bs
Log Message:
-----------
Merge pull request #2369 from w3c/issue-2368-ambiguous-refs
Disambiguate [=success=] autolinks
Commit: f4e770ddd2734c798354c2226cf8c7df18d452ce
https://github.com/w3c/webauthn/commit/f4e770ddd2734c798354c2226cf8c7df18d452ce
Author: Emil Lundberg <emil@yubico.com>
Date: 2025-12-10 (Wed, 10 Dec 2025)
Changed paths:
M .github/workflows/build-validate-publish.yml
Log Message:
-----------
Bump build-validate-publish workflow image
This should fix build issues like the following:
**Setup toolchain**
$ pipx --version
1.8.0
$ pipx install bikeshed --quiet
creating virtual environment...
installing bikeshed...
done! ✨ 🌟 ✨
installed package bikeshed 6.1.1, installed using Python 3.10.12
These apps are now globally available
- bikeshed
$ bikeshed update
Bikeshed now requires Python 3.12 or higher; you are on 3.10.12.
For instructions on how to set up a pyenv with 3.12, see:
https://speced.github.io/bikeshed/#installing
Command `bikeshed update` failed with exit code: 1.
Error: Process completed with exit code 1.
The `ubuntu-24.04` runner image includes Python 3.12.3.
Commit: c39b6dea2b479ed570b079830f50f9d36efd6705
https://github.com/w3c/webauthn/commit/c39b6dea2b479ed570b079830f50f9d36efd6705
Author: Matthew Miller <mmiller@duosecurity.com>
Date: 2025-12-10 (Wed, 10 Dec 2025)
Changed paths:
M index.bs
Log Message:
-----------
Merge pull request #2258 from w3c/mm/#2257-add-rp-id-credential-record
Add a new optional `rpId` to Credential Record
Commit: 5640a5ad457a737ceebd05346e226b6c46de6442
https://github.com/w3c/webauthn/commit/5640a5ad457a737ceebd05346e226b6c46de6442
Author: Emil Lundberg <emil@yubico.com>
Date: 2025-12-15 (Mon, 15 Dec 2025)
Changed paths:
M .github/workflows/build-validate-publish.yml
Log Message:
-----------
Use w3c/spec-prod workflow version pinned to Bikeshed 5
See https://github.com/w3c/spec-prod/pull/219#issuecomment-3649495878
Thanks @MasterKale for arranging this!
(See https://github.com/w3c/spec-prod/issues/141#issuecomment-3647593728 )
Commit: aebc94c6ac367fb03fe948e04075d6d8677538c4
https://github.com/w3c/webauthn/commit/aebc94c6ac367fb03fe948e04075d6d8677538c4
Author: Emil Lundberg <emil@yubico.com>
Date: 2025-12-15 (Mon, 15 Dec 2025)
Changed paths:
M .github/workflows/build-validate-publish.yml
Log Message:
-----------
Merge pull request #2371 from w3c/issue-2370-gha-fail
Bump build-validate-publish workflow image
Commit: b668301c3d5229002496aafecaf56bca59d9031a
https://github.com/w3c/webauthn/commit/b668301c3d5229002496aafecaf56bca59d9031a
Author: Michael B. Jones <michael_b_jones@hotmail.com>
Date: 2025-12-16 (Tue, 16 Dec 2025)
Changed paths:
M index.bs
Log Message:
-----------
Merge pull request #2367 from w3c/issue-2278-no-focus-abort
Delete inaccurate recommendation to abort on unfocus
Commit: ae644a8fbf6f00663bb3a42e0ce7c801b873b31b
https://github.com/w3c/webauthn/commit/ae644a8fbf6f00663bb3a42e0ce7c801b873b31b
Author: Tim Cappalli <tim@cloudauth.dev>
Date: 2025-12-18 (Thu, 18 Dec 2025)
Changed paths:
M index.bs
Log Message:
-----------
simplify to assertion signature
Commit: 75d43e6823dd6f97eaff06d0d48742c8da03902a
https://github.com/w3c/webauthn/commit/75d43e6823dd6f97eaff06d0d48742c8da03902a
Author: Tim Cappalli <tim@cloudauth.dev>
Date: 2025-12-18 (Thu, 18 Dec 2025)
Changed paths:
A .cspell/acronyms.txt
A .cspell/misc.txt
A .cspell/names.txt
M .github/workflows/build-validate-publish.yml
A cspell.json
M index.bs
M test-vectors/webauthn-test-vectors.py
Log Message:
-----------
Merge remote-tracking branch 'origin/main' into 2338-cmtg
Compare: https://github.com/w3c/webauthn/compare/a67d0816d699...75d43e6823dd
To unsubscribe from these emails, change your notification settings at https://github.com/w3c/webauthn/settings/notifications
Received on Thursday, 18 December 2025 19:24:48 UTC