public-webauthn@w3.org from October 2025 by author

Ackermann Yuriy

Re: [webauthn] Same PRF regardless of UV? (#2337) (Tuesday, 14 October)

Akshay Kumar via GitHub

Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342) (Wednesday, 22 October)

ANTHONY J NADALIN

10/22/2025 W3C Web Authentication Meeting Agenda (Wednesday, 22 October)
Re: 10/08/2025 W3C Web Authentication Meeting Agenda (Tuesday, 7 October)

ANTHONY NADALIN

10/29/2025 W3C Web Authentication Meeting Agenda (Wednesday, 29 October)
10/01/2025 W3C Web Authentication Meeting Agenda (Wednesday, 1 October)

Antony R Mott via GitHub

Re: [webauthn] Update: COSE elliptic curve signatures 'in the wild' from small RustyKey® alpha-test user base (#2339) (Tuesday, 14 October)
Re: [webauthn] Update: COSE elliptic curve signatures 'in the wild' from small RustyKey® alpha-test user base (#2339) (Monday, 13 October)
[webauthn] Update: COSE elliptic curve signatures 'in the wild' from small RustyKey® alpha-test user base (#2339) (Monday, 13 October)

Arnar Birgisson via GitHub

Re: [webauthn] Add Credential Manager Trust Group Key (CMTG) extension (#2338) (Monday, 27 October)
Re: [webauthn] Add Relationship Public Key (RPK) (#2338) (Friday, 10 October)
Re: [webauthn] Add Relationship Public Key (RPK) (#2338) (Thursday, 9 October)

Dennis Kniep via GitHub

Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Saturday, 25 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Saturday, 25 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Friday, 24 October)
[webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Friday, 24 October)

edgreal via GitHub

[webauthn] Pull Request: Create SECURITY.md for security policy (Saturday, 18 October)
[webauthn] Malware (#2343) (Saturday, 18 October)

Emil Lundberg

[w3c/webauthn] 64c16e: Merge pull request #2356 from w3c/fold-l3-change-h... (Wednesday, 29 October)
[w3c/webauthn] b87ce1: Merge pull request #2346 from w3c/test-vectors-ext... (Wednesday, 29 October)
[w3c/webauthn] (Wednesday, 29 October)
[w3c/webauthn] d392f2: Fold changes since L3WD2 into changes since L2 (Wednesday, 29 October)
[w3c/webauthn] (Wednesday, 29 October)
[w3c/webauthn] d1f88c: Include base64url encoding of extra_client_data in... (Wednesday, 29 October)
[w3c/webauthn] d392f2: Fold changes since L3WD2 into changes since L2 (Wednesday, 29 October)
[w3c/webauthn] 952ac4: Rename extra_client_data to extraData_random in te... (Wednesday, 29 October)
[w3c/webauthn] 27439f: Merge pull request #2348 from w3c/nsatragno-patch-1 (Friday, 24 October)
[w3c/webauthn] (Friday, 24 October)
[w3c/webauthn] 7fa9be: Fix typo (Friday, 24 October)
[w3c/webauthn] 06672f: Recode test vectors to omit base64url padding (Tuesday, 21 October)
[w3c/webauthn] d1f88c: Include base64url encoding of extra_client_data in... (Tuesday, 21 October)

Emil Lundberg via GitHub

Closed: [webauthn] Merge changes since L3WD2 into changes since L2 (#2302) (Wednesday, 29 October)
[webauthn] new commits pushed by emlun (Wednesday, 29 October)
[webauthn] Merged Pull Request: Fold changes since L3WD2 into changes since L2 (Wednesday, 29 October)
Closed: [webauthn] 16.2. ES256 Credential with No Attestation test vector misses extraData content (#2345) (Wednesday, 29 October)
[webauthn] new commits pushed by emlun (Wednesday, 29 October)
[webauthn] Merged Pull Request: Include base64url encoding of extra_client_data in test vectors; regenerate without b64 padding (Wednesday, 29 October)
Re: [webauthn] Fold changes since L3WD2 into changes since L2 (#2356) (Wednesday, 29 October)
Re: [webauthn] [L3 CR] Transition Request Draft (#2355) (Wednesday, 29 October)
Re: [webauthn] Fold changes since L3WD2 into changes since L2 (#2356) (Wednesday, 29 October)
[webauthn] Pull Request: Fold changes since L3WD2 into changes since L2 (Wednesday, 29 October)
[webauthn] new commits pushed by emlun (Wednesday, 29 October)
[webauthn] new commits pushed by emlun (Wednesday, 29 October)
Re: [webauthn] [L3 CR] Transition Request Draft (#2355) (Wednesday, 29 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Tuesday, 28 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Monday, 27 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Friday, 24 October)
[webauthn] new commits pushed by emlun (Friday, 24 October)
[webauthn] Merged Pull Request: Fix typo (Friday, 24 October)
[webauthn] new commits pushed by emlun (Tuesday, 21 October)
Re: [webauthn] 16.2. ES256 Credential with No Attestation test vector misses extraData content (#2345) (Tuesday, 21 October)
[webauthn] Pull Request: Include base64url encoding of extra_client_data in test vectors (Tuesday, 21 October)
[webauthn] new commits pushed by emlun (Tuesday, 21 October)
Re: [webauthn] 16.2. ES256 Credential with No Attestation test vector misses extraData content (#2345) (Tuesday, 21 October)
Re: [webauthn] WebAuthn requestUserInfo -- easier account creation (#2336) (Monday, 20 October)
Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342) (Monday, 20 October)

Felix Magedanz via GitHub

Re: [webauthn] Re-Open "confirmation" discussion (see PR#2020) (#2352) (Tuesday, 28 October)

Firstyear via GitHub

Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Monday, 27 October)
Re: [webauthn] Consider RP ID migration use cases (#2350) (Monday, 27 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Monday, 27 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Saturday, 25 October)
Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342) (Friday, 17 October)
Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342) (Friday, 17 October)
Re: [webauthn] Add Relationship Public Key (RPK) (#2338) (Monday, 13 October)
Re: [webauthn] Add Relationship Public Key (RPK) (#2338) (Friday, 10 October)
Re: [webauthn] Same PRF regardless of UV? (#2337) (Thursday, 9 October)

Fuqiao Xue via GitHub

Re: [webauthn] Trailing position of metadata (#1646) (Friday, 10 October)
Re: [webauthn] Unicode "tag" characters are deprecated for language tagging (#1642) (Friday, 10 October)
Re: [webauthn] Mechanism for encoding *direction* metadata may need more work (#1644) (Friday, 10 October)
Re: [webauthn] Use of in-field metadata not preferred (#1643) (Friday, 10 October)

github-actions[bot] via GitHub

[webauthn] new commits pushed by github-actions[bot] (Wednesday, 29 October)
[webauthn] new commits pushed by github-actions[bot] (Wednesday, 29 October)
[webauthn] new commits pushed by github-actions[bot] (Wednesday, 29 October)
[webauthn] new commits pushed by github-actions[bot] (Wednesday, 29 October)
[webauthn] new commits pushed by github-actions[bot] (Friday, 24 October)

Harsh Lal via GitHub

Re: [webauthn] Feature: Allow RP to opt out of certain transports (#2349) (Thursday, 30 October)
[webauthn] FallbackURLextension to support Hybrid Cross device Passkeys not found use cases (#2341) (Wednesday, 15 October)

Ian Jacobs

Re: 10/22/2025 W3C Web Authentication Meeting Agenda (Wednesday, 22 October)
Re: 10/08/2025 W3C Web Authentication Meeting Agenda (Thursday, 16 October)

Isaiah Inuwa via GitHub

Re: [webauthn] WebAuthn requestUserInfo -- easier account creation (#2336) (Wednesday, 29 October)
Re: [webauthn] Same PRF regardless of UV? (#2337) (Tuesday, 14 October)
Re: [webauthn] Same PRF regardless of UV? (#2337) (Thursday, 9 October)
Re: [webauthn] Same PRF regardless of UV? (#2337) (Wednesday, 8 October)
Re: [webauthn] Same PRF regardless of UV? (#2337) (Wednesday, 8 October)

James Elliott via GitHub

Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342) (Friday, 17 October)
Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342) (Friday, 17 October)
Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342) (Friday, 17 October)
Re: [webauthn] Update: COSE elliptic curve signatures 'in the wild' from small RustyKey® alpha-test user base (#2339) (Monday, 13 October)
Re: [webauthn] Update: COSE elliptic curve signatures 'in the wild' from small RustyKey® alpha-test user base (#2339) (Monday, 13 October)

John Bradley via GitHub

Re: [webauthn] Same PRF regardless of UV? (#2337) (Thursday, 9 October)

Joost van Dijk via GitHub

Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Tuesday, 28 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Tuesday, 28 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Monday, 27 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Saturday, 25 October)

Joshua Zhao via GitHub

Re: [webauthn] Need to have authenticator-only extensions (#2331) (Tuesday, 7 October)
Re: [webauthn] Need to have authenticator-only extensions (#2331) (Tuesday, 7 October)

Ken Buchanan via GitHub

Re: [webauthn] Allow immediate mediation (#2228) (Monday, 27 October)
Re: [webauthn] Allow immediate mediation (#2228) (Friday, 24 October)
Re: [webauthn] Allow immediate mediation (#2228) (Friday, 24 October)

Marcos Cáceres via GitHub

Re: [webauthn] Allow immediate mediation (#2228) (Tuesday, 28 October)

maronsen via GitHub

Re: [webauthn] Add Signal API (#2093) (Monday, 6 October)

Martin Kreichgauer via GitHub

Re: [webauthn] Consider RP ID migration use cases (#2350) (Monday, 27 October)

Matthew Miller via GitHub

Re: [webauthn] Consider RP ID migration use cases (#2350) (Wednesday, 29 October)
Re: [webauthn] Fold changes since L3WD2 into changes since L2 (#2356) (Wednesday, 29 October)
Re: [webauthn] Consider RP ID migration use cases (#2350) (Monday, 27 October)
Re: [webauthn] WebAuthn requestUserInfo -- easier account creation (#2336) (Monday, 27 October)
Re: [webauthn] Consider RP ID migration use cases (#2350) (Monday, 27 October)
[webauthn] Consider RP ID migration use cases (#2350) (Monday, 27 October)
Re: [webauthn] Allow immediate mediation (#2228) (Friday, 24 October)
Re: [webauthn] Allow immediate mediation (#2228) (Friday, 24 October)
Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342) (Friday, 17 October)
Re: [webauthn] Discovery of migrated credentials (#2340) (Tuesday, 14 October)
Re: [webauthn] WebAuthn account creation API (#2336) (Wednesday, 1 October)
Re: [webauthn] WebAuthn account creation API (#2336) (Wednesday, 1 October)
Re: [webauthn] Feature Request: disableAutoSelect for PublicKeyCredentialRequestOptions (#2335) (Wednesday, 1 October)
Closed: [webauthn] Feature Request: disableAutoSelect for PublicKeyCredentialRequestOptions (#2335) (Wednesday, 1 October)

Michael David Kuckuk via GitHub

Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Friday, 24 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Friday, 24 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Friday, 24 October)

My1 via GitHub

Re: [webauthn] Same PRF regardless of UV? (#2337) (Tuesday, 14 October)
Re: [webauthn] Same PRF regardless of UV? (#2337) (Thursday, 9 October)
Re: [webauthn] Same PRF regardless of UV? (#2337) (Wednesday, 8 October)
Re: [webauthn] Same PRF regardless of UV? (#2337) (Wednesday, 8 October)
[webauthn] Same PRF regardless of UV? (#2337) (Wednesday, 8 October)

Natalia Trojanowska-Korepta via GitHub

Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Tuesday, 28 October)

Nina Satragno

[w3c/webauthn] 7fa9be: Fix typo (Thursday, 23 October)

Nina Satragno via GitHub

Re: [webauthn] [WIP] Add `requestUserInfo` (#2358) (Friday, 31 October)
Re: [webauthn] [L3 CR] Transition Request Draft (#2355) (Friday, 31 October)
Re: [webauthn] Additional privacy recommendations for getClientCapabilities (#2357) (Wednesday, 29 October)
Re: [webauthn] Additional privacy recommendations for getClientCapabilities (#2357) (Wednesday, 29 October)
Re: [webauthn] Consider RP ID migration use cases (#2350) (Wednesday, 29 October)
Re: [webauthn] Consider RP ID migration use cases (#2350) (Wednesday, 29 October)
[webauthn] Pull Request: [WIP] Add `requestUserInfo` (Wednesday, 29 October)
Re: [webauthn] WebAuthn requestUserInfo -- easier account creation (#2336) (Tuesday, 28 October)
Re: [webauthn] Feature: Allow RP to opt out of certain transports (#2349) (Tuesday, 28 October)
Re: [webauthn] Spec doesn't build with bikeshed 5.0.3 or higher (#2351) (Monday, 27 October)
Closed: [webauthn] Spec doesn't build with bikeshed 5.0.3 or higher (#2351) (Monday, 27 October)
[webauthn] Spec doesn't build with bikeshed 5.0.3 or higher (#2351) (Monday, 27 October)
Re: [webauthn] Add Credential Manager Trust Group Key (CMTG) extension (#2338) (Monday, 27 October)
Re: [webauthn] WebAuthn requestUserInfo -- easier account creation (#2336) (Monday, 27 October)
Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342) (Monday, 27 October)
Closed: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342) (Monday, 27 October)
Re: [webauthn] Add Credential Manager Trust Group Key (CMTG) extension (#2338) (Monday, 27 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Monday, 27 October)
Re: [webauthn] Consider RP ID migration use cases (#2350) (Monday, 27 October)
Re: [webauthn] Consider RP ID migration use cases (#2350) (Monday, 27 October)
[webauthn] Pull Request: Fix typo (Thursday, 23 October)
[webauthn] new commits pushed by nsatragno (Thursday, 23 October)
Re: [webauthn] WebAuthn requestUserInfo -- easier account creation (#2336) (Monday, 20 October)
Re: [webauthn] WebAuthn requestUserInfo -- easier account creation (#2336) (Friday, 17 October)
[webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342) (Friday, 17 October)
Re: [webauthn] Same PRF regardless of UV? (#2337) (Tuesday, 14 October)
Re: [webauthn] WebAuthn account creation API (#2336) (Wednesday, 1 October)
[webauthn] WebAuthn account creation API (#2336) (Wednesday, 1 October)

Peter Gasper via GitHub

Re: [webauthn] 16.2. ES256 Credential with No Attestation test vector misses extraData content (#2345) (Tuesday, 21 October)
[webauthn] 16.2. ES256 Credential with No Attestation test vector misses extraData content (#2345) (Tuesday, 21 October)

Ricky Mondello via GitHub

Re: [webauthn] Allow immediate mediation (#2228) (Friday, 24 October)
Re: [webauthn] Allow immediate mediation (#2228) (Friday, 24 October)
Re: [webauthn] Allow immediate mediation (#2228) (Friday, 24 October)

Rolf Lindemann via GitHub

[webauthn] Re-Open "confirmation" discussion (see PR#2020) (#2352) (Tuesday, 28 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Monday, 27 October)

Shane Weeden via GitHub

[webauthn] Discovery of migrated credentials (#2340) (Tuesday, 14 October)

Simone Onofri

Re: 10/08/2025 W3C Web Authentication Meeting Agenda (Wednesday, 8 October)

Simone Onofri (W3C Calendar)

Event Canceled: Web Authentication weekly (Thursday, 2 October)
Event Updated: Web Authentication weekly (Thursday, 2 October)
Event Canceled: Web Authentication weekly (Thursday, 2 October)

Simone Onofri via GitHub

Re: [webauthn] [L3 CR] Transition Request Draft (#2355) (Friday, 31 October)
Re: [webauthn] [L3 CR] Transition Request Draft (#2355) (Wednesday, 29 October)
Re: [webauthn] [L3 CR] Transition Request Draft (#2355) (Wednesday, 29 October)
[webauthn] [L3 CR] Transition Request Draft (#2355) (Wednesday, 29 October)
Re: [webauthn] Prepare for CR (#2225) (Tuesday, 28 October)
Closed: [webauthn] [L3 CR] Horizontal Review: Security & Privacy (#2244) (Tuesday, 28 October)
Re: [webauthn] [L3 CR] Horizontal Review: Security & Privacy (#2244) (Wednesday, 1 October)

thalindaAC2218918 via GitHub

[webauthn] thalinda (#2347) (Thursday, 23 October)

Tim Cappalli

[w3c/webauthn] 8e4f54: Adds addt'l recs for getCC privacy considerations (Wednesday, 29 October)
[w3c/webauthn] 80d6e2: Merge pull request #2354 from w3c/tc-typos (Wednesday, 29 October)
[w3c/webauthn] 5c1b16: chore: Adds a CSpell configuration (#2353) (Wednesday, 29 October)
[w3c/webauthn] (Wednesday, 29 October)
[w3c/webauthn] aa2217: typos (Wednesday, 29 October)
[w3c/webauthn] (Wednesday, 29 October)
[w3c/webauthn] 06d2f7: chore: Adds a CSpell configuration (#2353) (Wednesday, 29 October)
[w3c/webauthn] 2aaadc: Update .cspell/names.txt (Wednesday, 29 October)
[w3c/webauthn] aa2217: typos (Tuesday, 28 October)
[w3c/webauthn] c9660b: add cspell config and dicts (Tuesday, 28 October)

Tim Cappalli via GitHub

Re: [webauthn] Additional privacy recommendations for getClientCapabilities (#2357) (Wednesday, 29 October)
Re: [webauthn] Consider RP ID migration use cases (#2350) (Wednesday, 29 October)
[webauthn] Pull Request: Additional privacy recommendations for getClientCapabilities (Wednesday, 29 October)
[webauthn] new commits pushed by timcappalli (Wednesday, 29 October)
Re: [webauthn] document and mitigate fingerprinting and disclosure risk of capabilities and extensions (#2320) (Wednesday, 29 October)
Re: [webauthn] privacy implications of cross-origin iframe (#2321) (Wednesday, 29 October)
Re: [webauthn] user verification discouraged should consider privacy impact or UA advice (#2323) (Wednesday, 29 October)
[webauthn] new commits pushed by timcappalli (Wednesday, 29 October)
[webauthn] Merged Pull Request: Fixes some typos (Wednesday, 29 October)
[webauthn] new commits pushed by timcappalli (Wednesday, 29 October)
[webauthn] Merged Pull Request: chore: Adds a CSpell configuration (Wednesday, 29 October)
[webauthn] new commits pushed by timcappalli (Wednesday, 29 October)
[webauthn] Pull Request: Fixes some typos (Tuesday, 28 October)
[webauthn] new commits pushed by timcappalli (Tuesday, 28 October)
[webauthn] Pull Request: chore: Adds a CSpell configuration (Tuesday, 28 October)
[webauthn] new commits pushed by timcappalli (Tuesday, 28 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Tuesday, 28 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Tuesday, 28 October)
Re: [webauthn] Consider RP ID migration use cases (#2350) (Monday, 27 October)
Re: [webauthn] Consider RP ID migration use cases (#2350) (Monday, 27 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Friday, 24 October)
Re: [webauthn] Allow immediate mediation (#2228) (Friday, 24 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Friday, 24 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Friday, 24 October)
Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349) (Friday, 24 October)
Closed: [webauthn] thalinda (#2347) (Thursday, 23 October)
[webauthn] Closed Pull Request: Create SECURITY.md for security policy (Sunday, 19 October)
Closed: [webauthn] Malware (#2343) (Sunday, 19 October)
Re: [webauthn] Discovery of migrated credentials (#2340) (Tuesday, 14 October)
Re: [webauthn] Update: COSE elliptic curve signatures 'in the wild' from small RustyKey® alpha-test user base (#2339) (Monday, 13 October)
Re: [webauthn] naming of hints is confusing (#2322) (Wednesday, 8 October)
Closed: [webauthn] naming of hints is confusing (#2322) (Wednesday, 8 October)
[webauthn] Add Relationship Public Key (RPK) (#2338) (Wednesday, 8 October)
Re: [webauthn] Add Signal API (#2093) (Monday, 6 October)

W3C Webmaster via GitHub API

Weekly github digest (WebAuthn) (Tuesday, 28 October)
Weekly github digest (WebAuthn) (Tuesday, 21 October)
Weekly github digest (WebAuthn) (Tuesday, 14 October)
Weekly github digest (WebAuthn) (Tuesday, 7 October)

zll600 via GitHub

Re: [webauthn] Numbering in the step needs update in 7.1. Registering a New Credential (#2030) (Friday, 10 October)

Last message date: Friday, 31 October 2025 21:33:54 UTC