Friday, 31 October 2025
- Re: [webauthn] [WIP] Add `requestUserInfo` (#2358)
- Re: [webauthn] [L3 CR] Transition Request Draft (#2355)
- Re: [webauthn] [L3 CR] Transition Request Draft (#2355)
Thursday, 30 October 2025
Wednesday, 29 October 2025
- Re: [webauthn] Additional privacy recommendations for getClientCapabilities (#2357)
- Re: [webauthn] Additional privacy recommendations for getClientCapabilities (#2357)
- [w3c/webauthn] 64c16e: Merge pull request #2356 from w3c/fold-l3-change-h...
- [w3c/webauthn] b87ce1: Merge pull request #2346 from w3c/test-vectors-ext...
- [webauthn] new commits pushed by github-actions[bot]
- [webauthn] new commits pushed by github-actions[bot]
- [w3c/webauthn]
- [w3c/webauthn] d392f2: Fold changes since L3WD2 into changes since L2
- Closed: [webauthn] Merge changes since L3WD2 into changes since L2 (#2302)
- [webauthn] new commits pushed by emlun
- [webauthn] Merged Pull Request: Fold changes since L3WD2 into changes since L2
- [w3c/webauthn]
- [w3c/webauthn] d1f88c: Include base64url encoding of extra_client_data in...
- Closed: [webauthn] 16.2. ES256 Credential with No Attestation test vector misses extraData content (#2345)
- [webauthn] new commits pushed by emlun
- [webauthn] Merged Pull Request: Include base64url encoding of extra_client_data in test vectors; regenerate without b64 padding
- Re: [webauthn] Additional privacy recommendations for getClientCapabilities (#2357)
- Re: [webauthn] Fold changes since L3WD2 into changes since L2 (#2356)
- Re: [webauthn] Consider RP ID migration use cases (#2350)
- Re: [webauthn] Consider RP ID migration use cases (#2350)
- Re: [webauthn] Consider RP ID migration use cases (#2350)
- Re: [webauthn] Consider RP ID migration use cases (#2350)
- [webauthn] Pull Request: [WIP] Add `requestUserInfo`
- [webauthn] Pull Request: Additional privacy recommendations for getClientCapabilities
- [w3c/webauthn] 8e4f54: Adds addt'l recs for getCC privacy considerations
- [webauthn] new commits pushed by timcappalli
- Re: [webauthn] WebAuthn requestUserInfo -- easier account creation (#2336)
- Re: [webauthn] Fold changes since L3WD2 into changes since L2 (#2356)
- Re: [webauthn] document and mitigate fingerprinting and disclosure risk of capabilities and extensions (#2320)
- Re: [webauthn] privacy implications of cross-origin iframe (#2321)
- Re: [webauthn] user verification discouraged should consider privacy impact or UA advice (#2323)
- Re: [webauthn] [L3 CR] Transition Request Draft (#2355)
- Re: [webauthn] Fold changes since L3WD2 into changes since L2 (#2356)
- [webauthn] Pull Request: Fold changes since L3WD2 into changes since L2
- [w3c/webauthn] d392f2: Fold changes since L3WD2 into changes since L2
- [webauthn] new commits pushed by emlun
- [w3c/webauthn] 952ac4: Rename extra_client_data to extraData_random in te...
- [webauthn] new commits pushed by emlun
- Re: [webauthn] [L3 CR] Transition Request Draft (#2355)
- Re: [webauthn] [L3 CR] Transition Request Draft (#2355)
- Re: [webauthn] [L3 CR] Transition Request Draft (#2355)
- [webauthn] [L3 CR] Transition Request Draft (#2355)
- [w3c/webauthn] 80d6e2: Merge pull request #2354 from w3c/tc-typos
- [webauthn] new commits pushed by github-actions[bot]
- [w3c/webauthn] 5c1b16: chore: Adds a CSpell configuration (#2353)
- [webauthn] new commits pushed by github-actions[bot]
- [w3c/webauthn]
- [w3c/webauthn] aa2217: typos
- [webauthn] new commits pushed by timcappalli
- [webauthn] Merged Pull Request: Fixes some typos
- [w3c/webauthn]
- [w3c/webauthn] 06d2f7: chore: Adds a CSpell configuration (#2353)
- [webauthn] new commits pushed by timcappalli
- [webauthn] Merged Pull Request: chore: Adds a CSpell configuration
- [w3c/webauthn] 2aaadc: Update .cspell/names.txt
- [webauthn] new commits pushed by timcappalli
- 10/29/2025 W3C Web Authentication Meeting Agenda
Tuesday, 28 October 2025
- [w3c/webauthn] aa2217: typos
- [webauthn] Pull Request: Fixes some typos
- [webauthn] new commits pushed by timcappalli
- [webauthn] Pull Request: chore: Adds a CSpell configuration
- [w3c/webauthn] c9660b: add cspell config and dicts
- [webauthn] new commits pushed by timcappalli
- Re: [webauthn] WebAuthn requestUserInfo -- easier account creation (#2336)
- Weekly github digest (WebAuthn)
- Re: [webauthn] Re-Open "confirmation" discussion (see PR#2020) (#2352)
- [webauthn] Re-Open "confirmation" discussion (see PR#2020) (#2352)
- Re: [webauthn] Feature: Allow RP to opt out of certain transports (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Prepare for CR (#2225)
- Closed: [webauthn] [L3 CR] Horizontal Review: Security & Privacy (#2244)
- Re: [webauthn] Allow immediate mediation (#2228)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
Monday, 27 October 2025
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Consider RP ID migration use cases (#2350)
- Re: [webauthn] Consider RP ID migration use cases (#2350)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] WebAuthn requestUserInfo -- easier account creation (#2336)
- Re: [webauthn] Spec doesn't build with bikeshed 5.0.3 or higher (#2351)
- Closed: [webauthn] Spec doesn't build with bikeshed 5.0.3 or higher (#2351)
- [webauthn] Spec doesn't build with bikeshed 5.0.3 or higher (#2351)
- Re: [webauthn] Add Credential Manager Trust Group Key (CMTG) extension (#2338)
- Re: [webauthn] Add Credential Manager Trust Group Key (CMTG) extension (#2338)
- Re: [webauthn] WebAuthn requestUserInfo -- easier account creation (#2336)
- Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342)
- Closed: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342)
- Re: [webauthn] Add Credential Manager Trust Group Key (CMTG) extension (#2338)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Consider RP ID migration use cases (#2350)
- Re: [webauthn] Consider RP ID migration use cases (#2350)
- Re: [webauthn] Consider RP ID migration use cases (#2350)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Consider RP ID migration use cases (#2350)
- Re: [webauthn] Consider RP ID migration use cases (#2350)
- Re: [webauthn] Consider RP ID migration use cases (#2350)
- [webauthn] Consider RP ID migration use cases (#2350)
- Re: [webauthn] Allow immediate mediation (#2228)
Saturday, 25 October 2025
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
Friday, 24 October 2025
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Allow immediate mediation (#2228)
- Re: [webauthn] Allow immediate mediation (#2228)
- Re: [webauthn] Allow immediate mediation (#2228)
- Re: [webauthn] Allow immediate mediation (#2228)
- Re: [webauthn] Allow immediate mediation (#2228)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Allow immediate mediation (#2228)
- Re: [webauthn] Allow immediate mediation (#2228)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Allow immediate mediation (#2228)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- Re: [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
- [w3c/webauthn] 27439f: Merge pull request #2348 from w3c/nsatragno-patch-1
- [webauthn] new commits pushed by github-actions[bot]
- [w3c/webauthn]
- [w3c/webauthn] 7fa9be: Fix typo
- [webauthn] new commits pushed by emlun
- [webauthn] Merged Pull Request: Fix typo
- [webauthn] Hybrid transport opt-out and ability for verifiable proof (#2349)
Thursday, 23 October 2025
- [w3c/webauthn] 7fa9be: Fix typo
- [webauthn] Pull Request: Fix typo
- [webauthn] new commits pushed by nsatragno
- Closed: [webauthn] thalinda (#2347)
- [webauthn] thalinda (#2347)
Wednesday, 22 October 2025
- Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342)
- Re: 10/22/2025 W3C Web Authentication Meeting Agenda
- 10/22/2025 W3C Web Authentication Meeting Agenda
Tuesday, 21 October 2025
- [w3c/webauthn] 06672f: Recode test vectors to omit base64url padding
- [webauthn] new commits pushed by emlun
- Weekly github digest (WebAuthn)
- Re: [webauthn] 16.2. ES256 Credential with No Attestation test vector misses extraData content (#2345)
- Re: [webauthn] 16.2. ES256 Credential with No Attestation test vector misses extraData content (#2345)
- [webauthn] Pull Request: Include base64url encoding of extra_client_data in test vectors
- [w3c/webauthn] d1f88c: Include base64url encoding of extra_client_data in...
- [webauthn] new commits pushed by emlun
- Re: [webauthn] 16.2. ES256 Credential with No Attestation test vector misses extraData content (#2345)
- [webauthn] 16.2. ES256 Credential with No Attestation test vector misses extraData content (#2345)
Monday, 20 October 2025
- Re: [webauthn] WebAuthn requestUserInfo -- easier account creation (#2336)
- Re: [webauthn] WebAuthn requestUserInfo -- easier account creation (#2336)
- Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342)
Sunday, 19 October 2025
- [webauthn] Closed Pull Request: Create SECURITY.md for security policy
- Closed: [webauthn] Malware (#2343)
Saturday, 18 October 2025
Friday, 17 October 2025
- Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342)
- Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342)
- Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342)
- Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342)
- Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342)
- Re: [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342)
- Re: [webauthn] WebAuthn requestUserInfo -- easier account creation (#2336)
- [webauthn] WebAuthn requirePlatformBackupEligibleCredential (#2342)
Thursday, 16 October 2025
Wednesday, 15 October 2025
Tuesday, 14 October 2025
- Re: [webauthn] Discovery of migrated credentials (#2340)
- Re: [webauthn] Discovery of migrated credentials (#2340)
- [webauthn] Discovery of migrated credentials (#2340)
- Re: [webauthn] Same PRF regardless of UV? (#2337)
- Re: [webauthn] Same PRF regardless of UV? (#2337)
- Re: [webauthn] Same PRF regardless of UV? (#2337)
- Re: [webauthn] Same PRF regardless of UV? (#2337)
- Weekly github digest (WebAuthn)
- Re: [webauthn] Update: COSE elliptic curve signatures 'in the wild' from small RustyKey® alpha-test user base (#2339)
Monday, 13 October 2025
- Re: [webauthn] Update: COSE elliptic curve signatures 'in the wild' from small RustyKey® alpha-test user base (#2339)
- Re: [webauthn] Update: COSE elliptic curve signatures 'in the wild' from small RustyKey® alpha-test user base (#2339)
- Re: [webauthn] Update: COSE elliptic curve signatures 'in the wild' from small RustyKey® alpha-test user base (#2339)
- Re: [webauthn] Update: COSE elliptic curve signatures 'in the wild' from small RustyKey® alpha-test user base (#2339)
- [webauthn] Update: COSE elliptic curve signatures 'in the wild' from small RustyKey® alpha-test user base (#2339)
- Re: [webauthn] Add Relationship Public Key (RPK) (#2338)
Friday, 10 October 2025
- Re: [webauthn] Add Relationship Public Key (RPK) (#2338)
- Re: [webauthn] Trailing position of metadata (#1646)
- Re: [webauthn] Unicode "tag" characters are deprecated for language tagging (#1642)
- Re: [webauthn] Mechanism for encoding *direction* metadata may need more work (#1644)
- Re: [webauthn] Use of in-field metadata not preferred (#1643)
- Re: [webauthn] Numbering in the step needs update in 7.1. Registering a New Credential (#2030)
- Re: [webauthn] Add Relationship Public Key (RPK) (#2338)
Thursday, 9 October 2025
- Re: [webauthn] Add Relationship Public Key (RPK) (#2338)
- Re: [webauthn] Same PRF regardless of UV? (#2337)
- Re: [webauthn] Same PRF regardless of UV? (#2337)
- Re: [webauthn] Same PRF regardless of UV? (#2337)
- Re: [webauthn] Same PRF regardless of UV? (#2337)
Wednesday, 8 October 2025
- Re: [webauthn] Same PRF regardless of UV? (#2337)
- Re: [webauthn] naming of hints is confusing (#2322)
- Closed: [webauthn] naming of hints is confusing (#2322)
- [webauthn] Add Relationship Public Key (RPK) (#2338)
- Re: 10/08/2025 W3C Web Authentication Meeting Agenda
- Re: [webauthn] Same PRF regardless of UV? (#2337)
- Re: [webauthn] Same PRF regardless of UV? (#2337)
- Re: [webauthn] Same PRF regardless of UV? (#2337)
- [webauthn] Same PRF regardless of UV? (#2337)
Tuesday, 7 October 2025
- Re: 10/08/2025 W3C Web Authentication Meeting Agenda
- Weekly github digest (WebAuthn)
- Re: [webauthn] Need to have authenticator-only extensions (#2331)
- Re: [webauthn] Need to have authenticator-only extensions (#2331)
Monday, 6 October 2025
Thursday, 2 October 2025
- Event Canceled: Web Authentication weekly
- Event Updated: Web Authentication weekly
- Event Canceled: Web Authentication weekly
Wednesday, 1 October 2025
- Re: [webauthn] WebAuthn account creation API (#2336)
- Re: [webauthn] WebAuthn account creation API (#2336)
- Re: [webauthn] WebAuthn account creation API (#2336)
- Re: [webauthn] Feature Request: disableAutoSelect for PublicKeyCredentialRequestOptions (#2335)
- Closed: [webauthn] Feature Request: disableAutoSelect for PublicKeyCredentialRequestOptions (#2335)
- [webauthn] WebAuthn account creation API (#2336)
- Re: [webauthn] [L3 CR] Horizontal Review: Security & Privacy (#2244)
- 10/01/2025 W3C Web Authentication Meeting Agenda