Weekly github digest (WebAuthn)

Issues
------
* w3c/webauthn (+4/-6/💬53)
  4 issues created:
  - Can we document protections (if any) around userHandle (with user-verification)? (by getify)
    https://github.com/w3c/webauthn/issues/2266 
  - Give each authenticator a GUID and add an option to CredentialsContainer: create method to return this GUID if user permits (by bigradish)
    https://github.com/w3c/webauthn/issues/2263 [stat:Discuss] [subtype:FeatureProposal] 
  - Find out whether passkeys are supported without passing value to publicKey parameter in .get() (by nehalbhanushali)
    https://github.com/w3c/webauthn/issues/2262 [stat:Discuss] [subtype:FeatureProposal] 
  - [L3 CR] Internationalization Self-Review (by timcappalli)
    https://github.com/w3c/webauthn/issues/2260 [type:process] 

  14 issues received 53 new comments:
  - #2266 Can we document protections (if any) around userHandle (with user-verification)? (13 by Firstyear, emlun, getify, timcappalli, ve7jtb)
    https://github.com/w3c/webauthn/issues/2266 
  - #2263 Give each authenticator a GUID and add an option to CredentialsContainer: create method to return this GUID if user permits (12 by Firstyear, MasterKale, bigradish, noloader, timcappalli)
    https://github.com/w3c/webauthn/issues/2263 [stat:Discuss] [subtype:FeatureProposal] 
  - #2262 Find out whether passkeys are supported without passing value to publicKey parameter in .get() (2 by emlun, timcappalli)
    https://github.com/w3c/webauthn/issues/2262 [stat:Discuss] 
  - #2252 Provide a way for an RP to indicate backup preference during credential registration for providers who support both backed-up and non-backed up credential (1 by akshayku)
    https://github.com/w3c/webauthn/issues/2252 [stat:Discuss] [subtype:FeatureProposal] 
  - #2249 [L3 CR] Implementation Requirements (1 by timcappalli)
    https://github.com/w3c/webauthn/issues/2249 [type:process] 
  - #2248 [L3 CR] Horizontal Review: Wide Review (2 by simoneonofri, timcappalli)
    https://github.com/w3c/webauthn/issues/2248 [type:process] 
  - #2247 [L3 CR] Horizontal Review: TAG Design Reviews (1 by nsatragno)
    https://github.com/w3c/webauthn/issues/2247 [type:process] 
  - #2246 [L3 CR] Horizontal Review: Accessibility (1 by MasterKale)
    https://github.com/w3c/webauthn/issues/2246 [type:process] 
  - #2245 [L3 CR] Horizontal Review: Internationalization (i18n) (1 by timcappalli)
    https://github.com/w3c/webauthn/issues/2245 [type:process] 
  - #2225 Prepare for CR (2 by MasterKale, simoneonofri)
    https://github.com/w3c/webauthn/issues/2225 [type:process] 
  - #2075 supplementalPubKeys attestation incompatible with most verification procedures (1 by emlun)
    https://github.com/w3c/webauthn/issues/2075 [type:technical] [subtype:extensions] [@Risk] 
  - #1645 [Editorial] Truncation description inaccurate (2 by aphillips, emlun)
    https://github.com/w3c/webauthn/issues/1645 [type:editorial] [i18n-needs-resolution] [@Risk] 
  - #1255 Add a way to use webauthn without Javascript (13 by Kerrick, MasterKale, bdougherty, kellytk, kevATin, selfissued, smlx, tcannonfodder)
    https://github.com/w3c/webauthn/issues/1255 [stat:Discuss] [type:technical] [subtype:FeatureProposal] 
  - #199 WebAuthn available to Workers?  aka "silent authentication" (1 by timcappalli)
    https://github.com/w3c/webauthn/issues/199 [type:technical] [subtype:algorithms/WebIDL] [@Risk] 

  6 issues closed:
  - supplementalPubKeys attestation incompatible with most verification procedures https://github.com/w3c/webauthn/issues/2075 [type:technical] [subtype:extensions] [@Risk] 
  - Give each authenticator a GUID and add an option to CredentialsContainer: create method to return this GUID if user permits https://github.com/w3c/webauthn/issues/2263 [stat:Discuss] [subtype:FeatureProposal] 
  - Add a way to use webauthn without Javascript https://github.com/w3c/webauthn/issues/1255 [stat:Discuss] [type:technical] [subtype:FeatureProposal] 
  - WebAuthn available to Workers?  aka "silent authentication" https://github.com/w3c/webauthn/issues/199 [type:technical] [subtype:algorithms/WebIDL] [@Risk] 
  - Support for PWA authenticators https://github.com/w3c/webauthn/issues/1514 [type:technical] [subtype:FeatureProposal] 
  - [L3 CR] Implementation Requirements https://github.com/w3c/webauthn/issues/2249 [type:process] 



Pull requests
-------------
* w3c/webauthn (+3/-2/💬4)
  3 pull requests submitted:
  - chore: try 3 for fixing the issue template (by timcappalli)
    https://github.com/w3c/webauthn/pull/2265 
  - chore: Fix issue template contact links (by timcappalli)
    https://github.com/w3c/webauthn/pull/2264 
  - Fix test vectors heading levels (by emlun)
    https://github.com/w3c/webauthn/pull/2261 [type:editorial] 

  4 pull requests received 4 new comments:
  - #2265 chore: try 3 for fixing the issue template (1 by james-d-elliott)
    https://github.com/w3c/webauthn/pull/2265 
  - #2264 chore: Fix issue template contact links (1 by timcappalli)
    https://github.com/w3c/webauthn/pull/2264 
  - #2258 Add a new optional `rpId` to Credential Record (1 by sbweeden)
    https://github.com/w3c/webauthn/pull/2258 
  - #2242 chore: Update issue template (1 by timcappalli)
    https://github.com/w3c/webauthn/pull/2242 [type:process] 

  2 pull requests merged:
  - chore: try 3 for fixing the issue template
    https://github.com/w3c/webauthn/pull/2265 
  - chore: Fix issue template contact links
    https://github.com/w3c/webauthn/pull/2264 


Repositories tracked by this digest:
-----------------------------------
* https://github.com/w3c/webauthn


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Tuesday, 25 February 2025 17:00:37 UTC