[w3c/webauthn] 5481e3: Forbid authenticator data from containing cleartex...

  Branch: refs/heads/remoteDesktopJsonExtension
  Home:   https://github.com/w3c/webauthn
  Commit: 5481e3b49c26e97b2faa0b4e8783cc096cd1a175
      https://github.com/w3c/webauthn/commit/5481e3b49c26e97b2faa0b4e8783cc096cd1a175
  Author: Emil Lundberg <emil@yubico.com>
  Date:   2025-12-10 (Wed, 10 Dec 2025)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Forbid authenticator data from containing cleartext PRF outputs


  Commit: 157fad4e4e6f963b933211f950c271c0d090055d
      https://github.com/w3c/webauthn/commit/157fad4e4e6f963b933211f950c271c0d090055d
  Author: Michael Jones <michael_b_jones@hotmail.com>
  Date:   2026-01-07 (Wed, 07 Jan 2026)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Add .well-known/webauthn registration


  Commit: ec7d8e5be4f056169450babbe38c96878b2d7322
      https://github.com/w3c/webauthn/commit/ec7d8e5be4f056169450babbe38c96878b2d7322
  Author: Michael Jones <michael_b_jones@hotmail.com>
  Date:   2026-01-07 (Wed, 07 Jan 2026)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Add Status: permanent


  Commit: ddde9430cdb89116b00c2fa5bbe0b17f94863eb3
      https://github.com/w3c/webauthn/commit/ddde9430cdb89116b00c2fa5bbe0b17f94863eb3
  Author: Michael Jones <michael_b_jones@hotmail.com>
  Date:   2026-01-07 (Wed, 07 Jan 2026)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Remove RFC 5785 reference


  Commit: 3cf21432001065489e5e6ad904467b3c44741f04
      https://github.com/w3c/webauthn/commit/3cf21432001065489e5e6ad904467b3c44741f04
  Author: David Waite <david@alkaline-solutions.com>
  Date:   2026-01-07 (Wed, 07 Jan 2026)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Merge pull request #2376 from w3c/mbj-well-known

Add .well-known/webauthn registration


  Commit: 2ec6eaeca682cf632a774e9a9843948e5510c562
      https://github.com/w3c/webauthn/commit/2ec6eaeca682cf632a774e9a9843948e5510c562
  Author: Emil Lundberg <emil@yubico.com>
  Date:   2026-01-14 (Wed, 14 Jan 2026)

  Changed paths:
    M index.bs
    M test-vectors/webauthn-test-vectors.py

  Log Message:
  -----------
  Fix incorrect ASN.1 encoding in android-key test vector

The `attestationSecurityLevel` and `keymintSecurityLevel` values in the
`attestation` extension (OID `1.3.6.1.4.1.11129.2.1.17`) of the attestation
certificate were incorrectly encoded as INTEGER type, but should be ENUMERATED
type.

See: https://github.com/w3c/webauthn/issues/2373


  Commit: b217bcb0d469ab5524b56f9001a4f7c1987bee4c
      https://github.com/w3c/webauthn/commit/b217bcb0d469ab5524b56f9001a4f7c1987bee4c
  Author: Matthew Miller <mmiller@duosecurity.com>
  Date:   2026-01-26 (Mon, 26 Jan 2026)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Add JSON object properies table to endpoint


  Commit: 5b953cb5ab043f8e66f8b2bac45ee75f9e947047
      https://github.com/w3c/webauthn/commit/5b953cb5ab043f8e66f8b2bac45ee75f9e947047
  Author: Matthew Miller <mmiller@duosecurity.com>
  Date:   2026-01-26 (Mon, 26 Jan 2026)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Link to Virtual Authenticator instead


  Commit: 3bf951ccee929ccd18f2e5ec5ec3cadf1729f894
      https://github.com/w3c/webauthn/commit/3bf951ccee929ccd18f2e5ec5ec3cadf1729f894
  Author: Emil Lundberg <emil@yubico.com>
  Date:   2026-01-28 (Wed, 28 Jan 2026)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Fix single quote misinterpreted as possessive/contraction apostrophe


  Commit: dc3b13f5e19fe015611e3061abfa0692e7cb9ca2
      https://github.com/w3c/webauthn/commit/dc3b13f5e19fe015611e3061abfa0692e7cb9ca2
  Author: Emil Lundberg <emil@yubico.com>
  Date:   2026-02-04 (Wed, 04 Feb 2026)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Merge pull request #2384 from w3c/fix-cddl-single-quote

Fix single quote misinterpreted as possessive/contraction apostrophe


  Commit: c65d2c8dfde89d16250edadcf8d29bda3fd81d5d
      https://github.com/w3c/webauthn/commit/c65d2c8dfde89d16250edadcf8d29bda3fd81d5d
  Author: Emil Lundberg <emil@yubico.com>
  Date:   2026-02-18 (Wed, 18 Feb 2026)

  Changed paths:
    M index.bs
    M test-vectors/webauthn-test-vectors.py

  Log Message:
  -----------
  Merge pull request #2378 from w3c/issue-2373-android-key-test-vectors

Fix incorrect ASN.1 encoding in android-key test vector


  Commit: 3a1e961119ad1727eb48a597377aa190b5b454b0
      https://github.com/w3c/webauthn/commit/3a1e961119ad1727eb48a597377aa190b5b454b0
  Author: Matthew Miller <mattmil3@cisco.com>
  Date:   2026-02-18 (Wed, 18 Feb 2026)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Make table ID unique


  Commit: 38b614c0c040c928a3ec08321d2aa6bd5a36e756
      https://github.com/w3c/webauthn/commit/38b614c0c040c928a3ec08321d2aa6bd5a36e756
  Author: Matthew Miller <mattmil3@cisco.com>
  Date:   2026-02-24 (Tue, 24 Feb 2026)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Update table definition


  Commit: 1be5e031981abea966dd2a9401f43261ba48cf86
      https://github.com/w3c/webauthn/commit/1be5e031981abea966dd2a9401f43261ba48cf86
  Author: Matthew Miller <mmiller@duosecurity.com>
  Date:   2026-02-25 (Wed, 25 Feb 2026)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Merge pull request #2381 from w3c/mm/add-props-table-set-user-verified

Add JSON object properties table to Set User Verified virtual authenticator endpoint


  Commit: ddc4a90ebaa7811a9186d680cb00412e1c56285f
      https://github.com/w3c/webauthn/commit/ddc4a90ebaa7811a9186d680cb00412e1c56285f
  Author: Tim Cappalli <tim@cloudauth.dev>
  Date:   2026-03-25 (Wed, 25 Mar 2026)

  Changed paths:
    M .cspell/misc.txt
    M .cspell/names.txt
    M .gitignore
    A explainers/.DS_Store
    A explainers/ambient-sign-in.md
    A explainers/broadening-the-user-base.md
    A explainers/challenge-url.md
    A explainers/conditional-create.md
    A explainers/conditional-ui.md
    A explainers/credential-manager-trust-group-key.md
    A explainers/cross-device-fallback-url.md
    A explainers/cross-origin-credential-creation.md
    A explainers/get-client-capabilities.md
    A explainers/hints-for-webauthn-clients.md
    A explainers/immediate-mediation.md
    A explainers/json-serialization-methods.md
    A explainers/large-blog-extension.md
    A explainers/min-pin-length-extension.md
    A explainers/new-error-codes-2024.md
    A explainers/prf-extension.md
    A explainers/raw-signing-extension.md
    A explainers/related-origin-requests.md
    A explainers/remote-desktop-support.md
    A explainers/request-user-info.md
    A explainers/require-platform-backup-eligible-credential.md
    A explainers/signal-api.md

  Log Message:
  -----------
  chore: Migrate Explainers from Wiki to repo


  Commit: 4d30714fa0c83ae7f83d692c273c368bde0ae63b
      https://github.com/w3c/webauthn/commit/4d30714fa0c83ae7f83d692c273c368bde0ae63b
  Author: Tim Cappalli <tim@cloudauth.dev>
  Date:   2026-03-25 (Wed, 25 Mar 2026)

  Changed paths:
    R explainers/.DS_Store

  Log Message:
  -----------
  Delete explainers/.DS_Store


  Commit: 93174ff5897a48a93d3c6d7c49dc7a8185261aef
      https://github.com/w3c/webauthn/commit/93174ff5897a48a93d3c6d7c49dc7a8185261aef
  Author: Emil Lundberg <emil@yubico.com>
  Date:   2026-04-01 (Wed, 01 Apr 2026)

  Changed paths:
    M explainers/json-serialization-methods.md

  Log Message:
  -----------
  Delete extraneous bullet point


  Commit: 3168f06e0fbb021e125e63bd414f9ad49ef48585
      https://github.com/w3c/webauthn/commit/3168f06e0fbb021e125e63bd414f9ad49ef48585
  Author: Emil Lundberg <emil@yubico.com>
  Date:   2026-04-01 (Wed, 01 Apr 2026)

  Changed paths:
    A explainers/large-blob-extension.md
    R explainers/large-blog-extension.md

  Log Message:
  -----------
  Fix name of explainers/large-blob-extension.md


  Commit: 053ffb8cd96d2f55188951219d83ddec6eab5d0f
      https://github.com/w3c/webauthn/commit/053ffb8cd96d2f55188951219d83ddec6eab5d0f
  Author: Emil Lundberg <emil@yubico.com>
  Date:   2026-04-01 (Wed, 01 Apr 2026)

  Changed paths:
    M explainers/raw-signing-extension.md

  Log Message:
  -----------
  doctoc explainers/raw-signing-extension.md


  Commit: 4a7fd5b59bf3e4994e62f357e8162579a39ecc42
      https://github.com/w3c/webauthn/commit/4a7fd5b59bf3e4994e62f357e8162579a39ecc42
  Author: Emil Lundberg <emil@yubico.com>
  Date:   2026-04-01 (Wed, 01 Apr 2026)

  Changed paths:
    M explainers/remote-desktop-support.md

  Log Message:
  -----------
  Format example URLs as code instead of clickable links


  Commit: 75647f4b83965e0dc699ecb28f6c9e837ae56f0d
      https://github.com/w3c/webauthn/commit/75647f4b83965e0dc699ecb28f6c9e837ae56f0d
  Author: Emil Lundberg <emil@yubico.com>
  Date:   2026-04-01 (Wed, 01 Apr 2026)

  Changed paths:
    M explainers/signal-api.md

  Log Message:
  -----------
  Remove redundant "explainer" from Signal API explainer title


  Commit: a7cb0d36d616f52c21f2f36eb1fea7edd014191c
      https://github.com/w3c/webauthn/commit/a7cb0d36d616f52c21f2f36eb1fea7edd014191c
  Author: Tim Cappalli <tim@cloudauth.dev>
  Date:   2026-04-01 (Wed, 01 Apr 2026)

  Changed paths:
    M .cspell/misc.txt
    M .cspell/names.txt
    M .gitignore
    A explainers/ambient-sign-in.md
    A explainers/broadening-the-user-base.md
    A explainers/challenge-url.md
    A explainers/conditional-create.md
    A explainers/conditional-ui.md
    A explainers/credential-manager-trust-group-key.md
    A explainers/cross-device-fallback-url.md
    A explainers/cross-origin-credential-creation.md
    A explainers/get-client-capabilities.md
    A explainers/hints-for-webauthn-clients.md
    A explainers/immediate-mediation.md
    A explainers/json-serialization-methods.md
    A explainers/large-blob-extension.md
    A explainers/min-pin-length-extension.md
    A explainers/new-error-codes-2024.md
    A explainers/prf-extension.md
    A explainers/raw-signing-extension.md
    A explainers/related-origin-requests.md
    A explainers/remote-desktop-support.md
    A explainers/request-user-info.md
    A explainers/require-platform-backup-eligible-credential.md
    A explainers/signal-api.md

  Log Message:
  -----------
  Merge pull request #2398 from w3c/wiki-migration

chore: Migrate Explainers from Wiki to repo


  Commit: a98efb6f6a3a3c041854288312d9a82ba040a243
      https://github.com/w3c/webauthn/commit/a98efb6f6a3a3c041854288312d9a82ba040a243
  Author: Ken Buchanan <kenrb@chromium.org>
  Date:   2026-04-02 (Thu, 02 Apr 2026)

  Changed paths:
    M explainers/immediate-mediation.md

  Log Message:
  -----------
  Update immediate-mediation.md

Clarification about the user gesture requirement. Mention the importance of rate limiting.


  Commit: d39bceea0924aff08094716de92a36012aa08aaf
      https://github.com/w3c/webauthn/commit/d39bceea0924aff08094716de92a36012aa08aaf
  Author: Tim Cappalli <tim@cloudauth.dev>
  Date:   2026-04-02 (Thu, 02 Apr 2026)

  Changed paths:
    M explainers/immediate-mediation.md

  Log Message:
  -----------
  Merge pull request #2407 from kenrb/main

Update the Immediate Mode explainer


  Commit: 44ad61ea568cf0b3121b1d1881f55a4a2e83abd1
      https://github.com/w3c/webauthn/commit/44ad61ea568cf0b3121b1d1881f55a4a2e83abd1
  Author: Emil Lundberg <emil@yubico.com>
  Date:   2026-04-08 (Wed, 08 Apr 2026)

  Changed paths:
    M index.bs

  Log Message:
  -----------
  Merge pull request #2372 from w3c/issue-2359-prf-authenticator-outputs

Forbid authenticator data from containing cleartext PRF outputs


  Commit: eb8c331b1cea4843dd438e6f68c9fe2f8c45b8e8
      https://github.com/w3c/webauthn/commit/eb8c331b1cea4843dd438e6f68c9fe2f8c45b8e8
  Author: Akshay Kumar <akshayku@microsoft.com>
  Date:   2026-04-14 (Tue, 14 Apr 2026)

  Changed paths:
    M .cspell/misc.txt
    M .cspell/names.txt
    M .gitignore
    A explainers/ambient-sign-in.md
    A explainers/broadening-the-user-base.md
    A explainers/challenge-url.md
    A explainers/conditional-create.md
    A explainers/conditional-ui.md
    A explainers/credential-manager-trust-group-key.md
    A explainers/cross-device-fallback-url.md
    A explainers/cross-origin-credential-creation.md
    A explainers/get-client-capabilities.md
    A explainers/hints-for-webauthn-clients.md
    A explainers/immediate-mediation.md
    A explainers/json-serialization-methods.md
    A explainers/large-blob-extension.md
    A explainers/min-pin-length-extension.md
    A explainers/new-error-codes-2024.md
    A explainers/prf-extension.md
    A explainers/raw-signing-extension.md
    A explainers/related-origin-requests.md
    A explainers/remote-desktop-support.md
    A explainers/request-user-info.md
    A explainers/require-platform-backup-eligible-credential.md
    A explainers/signal-api.md
    M index.bs
    M test-vectors/webauthn-test-vectors.py

  Log Message:
  -----------
  Merge branch 'main' into remoteDesktopJsonExtension


Compare: https://github.com/w3c/webauthn/compare/1f3590f55cdd...eb8c331b1cea

To unsubscribe from these emails, change your notification settings at https://github.com/w3c/webauthn/settings/notifications

Received on Monday, 13 April 2026 18:42:14 UTC