Thursday, 31 July 2025
Wednesday, 30 July 2025
Monday, 28 July 2025
- Re: [webauthn] New `userVerification` value with conditional behavior (#2310)
- Re: [webauthn] New `userVerification` value with conditional behavior (#2310)
Wednesday, 23 July 2025
Tuesday, 22 July 2025
Thursday, 17 July 2025
- Re: [webauthn] Prevent browsers from deleting credentials that the RP wanted to be server-side (#1569)
- Re: [webauthn] Prevent browsers from deleting credentials that the RP wanted to be server-side (#1569)
Wednesday, 16 July 2025
- Re: [webauthn] Add onlyCreate to prevent creation of a new key for existing user (#2313)
- Re: [webauthn] Require clients to support new fully-specified COSEAlgorithmIdentifiers (#2276)
- Re: [webauthn] Require clients to support new fully-specified COSEAlgorithmIdentifiers (#2276)
- Closed: [webauthn] Require clients to support new fully-specified COSEAlgorithmIdentifiers (#2276)
- Re: [webauthn] Backup Preference Option for providers who support both backed-up and non-backed up credential (#2259)
- [webauthn] Closed Pull Request: Backup Preference Option for providers who support both backed-up and non-backed up credential
- Re: [webauthn] Backup preference for providers who support both backed-up and non-backed up credential (#2253)
- [webauthn] Closed Pull Request: Backup preference for providers who support both backed-up and non-backed up credential
- Re: [webauthn] The authenticator may hide the credential even if the RP signals unknown credentials (#2192)
- Closed: [webauthn] The authenticator may hide the credential even if the RP signals unknown credentials (#2192)
- Re: [webauthn] excludeCredentials on Get (#2057)
- Re: [webauthn] Reflect caching of user verification in WebAuthn assertion (#2023)
- Closed: [webauthn] Reflect caching of user verification in WebAuthn assertion (#2023)
- Re: [webauthn] Deprecate in-field language/direction metadata (#2308)
- Re: [webauthn] Add "sign" extension (#2078)
- Re: [webauthn] Add Immediate Mediation (#2291)
- Re: [webauthn] Add a way to use webauthn without Javascript (#1255)
- Re: [webauthn] Add a way to use webauthn without Javascript (#1255)
- Closed: [webauthn] Prevent browsers from deleting credentials that the RP wanted to be server-side (#1569)
- Re: [webauthn] Prevent browsers from deleting credentials that the RP wanted to be server-side (#1569)
- Re: [webauthn] Prevent browsers from deleting credentials that the RP wanted to be server-side (#1569)
- 07/16/2025 W3C Web Authentication Meeting Agenda
Tuesday, 15 July 2025
- Re: [webauthn] Add onlyCreate to prevent creation of a new key for existing user (#2313)
- Weekly github digest (WebAuthn)
- [w3c/webauthn] 81514c: Change DER signature example to include long and s...
- [webauthn] new commits pushed by emlun
- Re: [webauthn] Clarify that DER lengths vary with INTEGER magnitude and curve size (#2315)
- [w3c/webauthn] 488684: Change DER signature example to include long and s...
- [webauthn] new commits pushed by emlun
- Re: [webauthn] Clarify that DER lengths vary with INTEGER magnitude and curve size (#2315)
- [webauthn] Pull Request: Clarify that DER lengths vary with INTEGER magnitude and curve size
- [w3c/webauthn] d7ff4e: Add note that DER lengths vary with INTEGER magnit...
- [webauthn] new commits pushed by emlun
- Re: [webauthn] Clarify DER encoding rules apply to signature format encoding in section 6.5.5 (#2314)
- [w3c/webauthn] 57e9f4: Add note that DER encoding lengths vary between al...
- [webauthn] new commits pushed by emlun
- [webauthn] Clarify DER encoding rules apply to signature format encoding in section 6.5.5 (#2314)
Monday, 14 July 2025
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Add onlyCreate to prevent creation of a new key for existing user (#2313)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
Sunday, 13 July 2025
Saturday, 12 July 2025
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Add onlyCreate to prevent creation of a new key for existing user (#2313)
Friday, 11 July 2025
- Re: [webauthn] Conditional creation incompatible with `uvInitialized` semantics in Chapter 7? (#2295)
- [w3c/webauthn] b7628d: Merge pull request #2311 from w3c/typo
- [webauthn] new commits pushed by github-actions[bot]
- [w3c/webauthn]
- [w3c/webauthn] 899089: Fix typo
- [webauthn] new commits pushed by emlun
- [webauthn] Merged Pull Request: Fix typo
- Re: [webauthn] Deprecate AuthenticatorAttachment in favor of PublicKeyCredentialHints. (#2053)
- Re: [webauthn] Deprecate AuthenticatorAttachment in favor of PublicKeyCredentialHints. (#2053)
- Re: [webauthn] Deprecate AuthenticatorAttachment in favor of PublicKeyCredentialHints. (#2053)
- Re: [webauthn] Add onlyCreate to prevent creation of a new key for existing user (#2313)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Add excludeUsers to prevent creation of new keys for known users (#2309)
- Closed: [webauthn] Add excludeUsers to prevent creation of new keys for known users (#2309)
- [webauthn] Add onlyCreate to prevent creation of a new key for existing user (#2313)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Add excludeUsers to prevent creation of new keys for known users (#2309)
- Re: [webauthn] Add excludeUsers to prevent creation of new keys for known users (#2309)
Thursday, 10 July 2025
- Re: [webauthn] Add a note about `appid` extension not compatible with related origin requests (#2312)
- Re: [webauthn] Conditional creation incompatible with `uvInitialized` semantics in Chapter 7? (#2295)
- [webauthn] Add a note about `appid` extension not compatible with related origin requests (#2312)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Add excludeUsers to prevent creation of new keys for known users (#2309)
- Re: [webauthn] Add excludeUsers to prevent creation of new keys for known users (#2309)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Conditional creation incompatible with `uvInitialized` semantics in Chapter 7? (#2295)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Conditional creation incompatible with `uvInitialized` semantics in Chapter 7? (#2295)
- [webauthn] Pull Request: Fix typo
- [w3c/webauthn] 899089: Fix typo
- [webauthn] new commits pushed by emlun
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] New `userVerification` value with conditional behavior (#2310)
- Re: [webauthn] See you F2F at TPAC 2026 in Kobe? Decide < 2025-06-20 (#2303)
- Re: [webauthn] [L3 CR] Horizontal Review: Security & Privacy (#2244)
- Re: [webauthn] [L3 CR] Horizontal Review: TAG Design Reviews (#2247)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Event Canceled: Web Authentication weekly
- [webauthn] New `userVerification` value with conditional behavior (#2310)
- Re: [webauthn] Add AAGUID to credProps (#2157)
Wednesday, 9 July 2025
- Re: [webauthn] Conditional creation incompatible with `uvInitialized` semantics in Chapter 7? (#2295)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] How to know if a user has already registered a device? (#1749)
- [webauthn] Add excludeUsers to prevent creation of new keys for known users (#2309)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Deprecate AuthenticatorAttachment in favor of PublicKeyCredentialHints. (#2053)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Closed: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- 07/09/2025 W3C Web Authentication Meeting Agenda
Tuesday, 8 July 2025
- Weekly github digest (WebAuthn)
- Re: [webauthn] Replace in-field string metadata with resource-level default fields (#2280)
- [webauthn] Closed Pull Request: Replace in-field string metadata with resource-level default fields
- [webauthn] Pull Request: Deprecate in-field language/direction metadata
- [w3c/webauthn] b063a8: Deprecate in-field language/direction metadata
- [webauthn] new commits pushed by emlun
Monday, 7 July 2025
- Re: [webauthn] Should an RP be able to provide finer grained authenticator filtering in attestation options? (#1688)
- Re: [webauthn] Should an RP be able to provide finer grained authenticator filtering in attestation options? (#1688)
Friday, 4 July 2025
Thursday, 3 July 2025
Wednesday, 2 July 2025
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Closed: [webauthn] Revised txAuthSimple extension (#2022)
- Re: [webauthn] Should credentials requested with attestation=none include an AAGUID? (#1962)
- Closed: [webauthn] Should credentials requested with attestation=none include an AAGUID? (#1962)
- Re: [webauthn] Support for remote desktops (#1577)
- Re: [webauthn] PublicKeyCredentialParameters can't select curve (E.g. ed448) (#1446)
- Closed: [webauthn] PublicKeyCredentialParameters can't select curve (E.g. ed448) (#1446)
- Re: [webauthn] Support a "create or get [or replace]" credential re-association operation (#1568)
- Re: [webauthn] CollectedClientData.crossOrigin default value and whether it is required (#1631)