public-webauthn@w3.org from July 2026 by author

Ackermann Yuriy

• Re: [webauthn] Multiple independent applications on one host (#2457) (Wednesday, 29 July)

Akshay Kumar

• [w3c/webauthn] 8896cd: algPolicy-01 (Wednesday, 29 July)
• [w3c/webauthn] e8cc96: Simplify algPolicy Further - Explainer Update. (#... (Wednesday, 29 July)
• [w3c/webauthn] 1c97d8: Simplify algPolicy Further - Explainer Update. (... (Wednesday, 29 July)
• [w3c/webauthn] c0b284: algPolicyExplanationUpdate-02 (Wednesday, 29 July)
• [w3c/webauthn] f3f862: algPolicy-04 (Wednesday, 29 July)
• [w3c/webauthn] df4594: algPolicy-01 (Wednesday, 29 July)
• [w3c/webauthn] 19eded: algPolicyExplanationUpdate-01 (Wednesday, 29 July)
• [w3c/webauthn] 0f0b19: algPolicy-01 (Monday, 13 July)
• [w3c/webauthn] 6d051d: algPolicy-01 (Wednesday, 8 July)
• [w3c/webauthn] (Wednesday, 8 July)
• [w3c/webauthn] (Wednesday, 8 July)
• [w3c/webauthn] (Wednesday, 8 July)
• [w3c/webauthn] 1d9b9d: algPolicySimplify (Tuesday, 7 July)
• [w3c/webauthn] 957cd5: algPolicySimplify (Tuesday, 7 July)

Akshay Kumar via GitHub

• [webauthn] new commits pushed by akshayku (Wednesday, 29 July)
• [webauthn] new commits pushed by akshayku (Wednesday, 29 July)
• [webauthn] Merged Pull Request: Simplify algPolicy Further - Explainer Update. (Wednesday, 29 July)
• [webauthn] new commits pushed by akshayku (Wednesday, 29 July)
• [webauthn] new commits pushed by akshayku (Wednesday, 29 July)
• Re: [webauthn] Support Algorithm Migration (#2437) (Wednesday, 29 July)
• Re: [webauthn] Support Algorithm Migration (#2437) (Wednesday, 29 July)
• [webauthn] Pull Request: Simplify algPolicy Further - Explainer Update. (Wednesday, 29 July)
• [webauthn] new commits pushed by akshayku (Wednesday, 29 July)
• [webauthn] new commits pushed by akshayku (Wednesday, 29 July)
• Re: [webauthn] Default Algorithems for Authenticators perhaps need updating. (#2448) (Friday, 17 July)
• Re: [webauthn] Default Algorithems for Authenticators perhaps need updating. (#2448) (Friday, 17 July)
• [webauthn] new commits pushed by akshayku (Monday, 13 July)
• Re: [webauthn] Adds mise to local tooling (#2443) (Thursday, 9 July)
• Re: [webauthn] Adds mise to local tooling (#2443) (Thursday, 9 July)
• Re: [webauthn] Upgrade to Bikeshed 7 (#2442) (Thursday, 9 July)
• [webauthn] Merged Pull Request: chore: removing type attribute for HTML validation during spec generation (Wednesday, 8 July)
• [webauthn] new commits pushed by akshayku (Wednesday, 8 July)
• [webauthn] new commits pushed by akshayku (Wednesday, 8 July)
• [webauthn] new commits pushed by akshayku (Wednesday, 8 July)
• [webauthn] new commits pushed by akshayku (Wednesday, 8 July)
• [webauthn] new commits pushed by akshayku (Wednesday, 8 July)
• [webauthn] Pull Request: Simplify Algorithm Migration Proposal Explainer (Tuesday, 7 July)
• [webauthn] new commits pushed by akshayku (Tuesday, 7 July)

Anasyazje via GitHub

• Re: [webauthn] Virtual authenticator should allow `counter` to always be `0` (#2363) (Wednesday, 22 July)

ANTHONY J NADALIN

• 07/29/2026 W3C Web Authentication Meeting Agenda (Wednesday, 29 July)
• 07/15/2026 W3C Web Authentication Meeting Agenda (Wednesday, 15 July)
• 07/01/2026 W3C Web Authentication Meeting Agenda (Wednesday, 1 July)

ANTHONY NADALIN

• Re: 07/08/2026 W3C Web Authentication Meeting Agenda (Wednesday, 8 July)
• 07/08/2026 W3C Web Authentication Meeting Agenda (Wednesday, 8 July)

Anthony Nadalin via GitHub

• Re: [webauthn] Missing validation of rpId before Related Origins fetch (#2422) (Wednesday, 1 July)
• Re: [webauthn] Missing validation of rpId before Related Origins fetch (#2422) (Wednesday, 1 July)

bjorn3 via GitHub

• Re: [webauthn] Add "Credential Manager Trust Group (CMTG) Key" extension (#2377) (Friday, 24 July)

Emil Lundberg via GitHub

• Re: [webauthn] Fix compatibility with Bikeshed 7 (#2428) (Wednesday, 15 July)
• Closed: [webauthn] Fix compatibility with Bikeshed 7 (#2428) (Wednesday, 15 July)
• [webauthn] "Invoke the authenticatorMakeCredential operation" step is accidentally indented (#2444) (Thursday, 9 July)
• [webauthn] Extension input processing directions are inconsistent (#2439) (Wednesday, 1 July)

github-actions[bot] via GitHub

• [webauthn] new commits pushed by github-actions[bot] (Thursday, 30 July)
• [webauthn] new commits pushed by github-actions[bot] (Wednesday, 29 July)
• [webauthn] new commits pushed by github-actions[bot] (Tuesday, 28 July)
• [webauthn] new commits pushed by github-actions[bot] (Tuesday, 21 July)
• [webauthn] new commits pushed by github-actions[bot] (Thursday, 9 July)

Harsh Lal via GitHub

• Re: [webauthn] Support Algorithm Migration (#2437) (Friday, 17 July)
• Re: [webauthn] Add Cross Device Fallback URL extension for hybrid transport authentication (#2380) (Thursday, 16 July)
• Re: [webauthn] Introduce a better local development setup (#2441) (Wednesday, 15 July)

Homayoun via GitHub

• [webauthn] Pull Request: Clarify that credentialId in Virtual Authenticator URLs is base64url encoded (Sunday, 26 July)

Isaiah Inuwa via GitHub

• Re: [webauthn] Missing validation of rpId before Related Origins fetch (#2422) (Thursday, 2 July)

John Bradley via GitHub

• [webauthn] Add new batch attestation type for Merkle tree certifictes (#2456) (Wednesday, 29 July)
• [webauthn] Default Algorithems for Authenticators perhaps need updating. (#2448) (Thursday, 16 July)

John O’Leary

• Re: Formal Proposal: A Deterministic (No-Token) Alternative to DBSC (Monday, 20 July)

karino via GitHub

• [webauthn] Hint to deprioritize credential providers that hold a credential in excludeCredentials (#2458) (Thursday, 30 July)

Martin Kreichgauer via GitHub

• Re: [webauthn] Update Virtual Authenticator API to better emulate synced passkey behavior (#2382) (Thursday, 9 July)

Matthew Miller

• [w3c/webauthn] 272848: Merge pull request #2382 from w3c/mm/add-signcount... (Thursday, 30 July)
• [w3c/webauthn] (Thursday, 30 July)
• [w3c/webauthn] c38239: Define signCount parameter (Thursday, 30 July)
• [w3c/webauthn] c0f89e: Update processing steps with more `else if` (Thursday, 30 July)
• [w3c/webauthn] 6571ea: Update signCount table value types (Thursday, 30 July)
• [w3c/webauthn] 946462: Humanize the signCount table descriptions (Thursday, 30 July)
• [w3c/webauthn] bc6f06: Allow signCount to be optional in Set Cred Props (Thursday, 30 July)
• [w3c/webauthn] 57e2b8: Refine processing steps for required signCount (Tuesday, 28 July)
• [w3c/webauthn] bd5c49: Merge pull request #2441 from w3c/mm-better-local-dev (Tuesday, 28 July)
• [w3c/webauthn] (Tuesday, 28 July)
• [w3c/webauthn] 9c8236: Introduce uv for dep management (Tuesday, 28 July)
• [w3c/webauthn] f678f9: Refine behavior when it's a null signCount (Wednesday, 15 July)
• [w3c/webauthn] ac3c18: Update Set Cred Props to create a counter (Thursday, 9 July)
• [w3c/webauthn] 207cf9: Removing style attribute for HTML validation durin... (Thursday, 9 July)
• [w3c/webauthn] 504e85: Fix command typo (Thursday, 9 July)
• [w3c/webauthn] d8d8b8: adds mise to local tooling (Thursday, 9 July)
• [w3c/webauthn] (Thursday, 9 July)
• [w3c/webauthn] 8b9d1b: Try to keep mise.toml next to mise.lock (Thursday, 9 July)
• [w3c/webauthn] 36bd4d: Switch to bikeshed serve for local dev (Thursday, 9 July)
• [w3c/webauthn] 36bd4d: Switch to bikeshed serve for local dev (Thursday, 9 July)
• [w3c/webauthn] c68b3f: Merge pull request #2442 from w3c/upgrade-to-bikes... (Thursday, 9 July)
• [w3c/webauthn] (Thursday, 9 July)
• [w3c/webauthn] a78af7: Fix all issues with `bikeshed spec` (Thursday, 9 July)
• [w3c/webauthn] 89661c: Indent CreateCred-InvokeAuthnrMakeCred (Thursday, 9 July)
• [w3c/webauthn] cbf89c: Upgrade to Bikeshed 7 (Wednesday, 8 July)
• [w3c/webauthn] a701a0: algPolicyExplainer_01 (Wednesday, 8 July)
• [w3c/webauthn] d58b6c: Restore anchor comment (Wednesday, 8 July)
• [w3c/webauthn] a78af7: Fix all issues with `bikeshed spec` (Wednesday, 8 July)
• [w3c/webauthn] 5481e3: Forbid authenticator data from containing cleartex... (Wednesday, 8 July)
• [w3c/webauthn] 9c8236: Introduce uv for dep management (Wednesday, 8 July)

Matthew Miller via GitHub

• [webauthn] new commits pushed by MasterKale (Thursday, 30 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 30 July)
• [webauthn] Merged Pull Request: Update Virtual Authenticator API to better emulate synced passkey behavior (Thursday, 30 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 30 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 30 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 30 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 30 July)
• Re: [webauthn] Adds additional hints for form factors (#2387) (Wednesday, 29 July)
• Re: [webauthn] Add Cross Device Fallback URL extension for hybrid transport authentication (#2380) (Wednesday, 29 July)
• Re: [webauthn] Update Virtual Authenticator API to better emulate synced passkey behavior (#2382) (Tuesday, 28 July)
• [webauthn] new commits pushed by MasterKale (Tuesday, 28 July)
• [webauthn] new commits pushed by MasterKale (Tuesday, 28 July)
• [webauthn] new commits pushed by MasterKale (Tuesday, 28 July)
• [webauthn] Merged Pull Request: Introduce a better local development setup (Tuesday, 28 July)
• Re: [webauthn] Update Virtual Authenticator API to better emulate synced passkey behavior (#2382) (Monday, 27 July)
• Re: [webauthn] Default Algorithems for Authenticators perhaps need updating. (#2448) (Friday, 17 July)
• Re: [webauthn] Update Virtual Authenticator API to better emulate synced passkey behavior (#2382) (Wednesday, 15 July)
• [webauthn] new commits pushed by MasterKale (Wednesday, 15 July)
• Re: [webauthn] Update Virtual Authenticator API to better emulate synced passkey behavior (#2382) (Wednesday, 15 July)
• Re: [webauthn] Update Virtual Authenticator API to better emulate synced passkey behavior (#2382) (Friday, 10 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 9 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 9 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 9 July)
• Re: [webauthn] Adds mise to local tooling (#2443) (Thursday, 9 July)
• Re: [webauthn] Adds mise to local tooling (#2443) (Thursday, 9 July)
• [webauthn] Merged Pull Request: Adds mise to local tooling (Thursday, 9 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 9 July)
• Re: [webauthn] Adds mise to local tooling (#2443) (Thursday, 9 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 9 July)
• Re: [webauthn] Adds mise to local tooling (#2443) (Thursday, 9 July)
• Re: [webauthn] Adds mise to local tooling (#2443) (Thursday, 9 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 9 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 9 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 9 July)
• Re: [webauthn] Adds mise to local tooling (#2443) (Thursday, 9 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 9 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 9 July)
• [webauthn] Merged Pull Request: Upgrade to Bikeshed 7 (Thursday, 9 July)
• [webauthn] new commits pushed by MasterKale (Thursday, 9 July)
• [webauthn] new commits pushed by MasterKale (Wednesday, 8 July)
• [webauthn] new commits pushed by MasterKale (Wednesday, 8 July)
• [webauthn] Pull Request: Upgrade to Bikeshed 7 (Wednesday, 8 July)
• [webauthn] new commits pushed by MasterKale (Wednesday, 8 July)
• [webauthn] new commits pushed by MasterKale (Wednesday, 8 July)
• [webauthn] new commits pushed by MasterKale (Wednesday, 8 July)
• [webauthn] Pull Request: Introduce a better local development setup (Wednesday, 8 July)
• [webauthn] new commits pushed by MasterKale (Wednesday, 8 July)
• Re: [webauthn] Post Quantum Crypto and WebAuthn Transition for RP (#2417) (Tuesday, 7 July)

Neeraj Jangid via GitHub

• Re: [webauthn] 5.4.3 "the user handle ought not be" -> RFC 2119 Terminology (#2431) (Friday, 10 July)

Nina Satragno via GitHub

• [webauthn] Virtual authenticator should clarify what happens when you add a credential with the same { rp id, user id } as an existing credential. (#2459) (Friday, 31 July)
• Re: [webauthn] Virtual authenticator should specify the error code when the signature counter is missing. (#2454) (Thursday, 30 July)
• Closed: [webauthn] Virtual authenticator should specify the error code when the signature counter is missing. (#2454) (Thursday, 30 July)
• [webauthn] Virtual authenticator should specify the error code when the signature counter is missing. (#2454) (Monday, 27 July)
• [webauthn] Virtual authenticator should clarify that ctap2/u2f authenticator cannot have transport=internal (and others). (#2453) (Monday, 27 July)
• [webauthn] Virtual authenticator large blob commands should clarify that the credential must be discoverable (#2452) (Monday, 27 July)
• [webauthn] Virtual authenticator set credential properties and remove credential should clarify that credentialId is base64 url encoded (#2450) (Wednesday, 22 July)
• [webauthn] Pull Request: Add explainer for simple PQC migration. (Tuesday, 21 July)
• [webauthn] Virtual Authenticator's get credential should specify how the credential object is serialized (#2447) (Monday, 13 July)
• [webauthn] Virtual Authenticator's add credential should probably support more algorithms than ECDSA (#2446) (Monday, 13 July)
• Re: [webauthn] Update Virtual Authenticator API to better emulate synced passkey behavior (#2382) (Friday, 10 July)
• [webauthn] Pull Request: [WIP] Add virtual authenticator support for CMTG keys (Friday, 10 July)
• [webauthn] new commits pushed by nsatragno (Tuesday, 7 July)
• [webauthn] Merged Pull Request: Simplify Algorithm Migration Proposal Explainer (Tuesday, 7 July)
• Re: [webauthn] Missing validation of rpId before Related Origins fetch (#2422) (Thursday, 2 July)
• Re: [webauthn] Missing validation of rpId before Related Origins fetch (#2422) (Thursday, 2 July)

Pascoe via GitHub

• Re: [webauthn] Missing validation of rpId before Related Origins fetch (#2422) (Wednesday, 1 July)

Petr Dvořák via GitHub

• Re: [webauthn] Re-Open "confirmation" discussion (see PR#2020) (#2352) (Tuesday, 14 July)

philomathic_life via GitHub

• Re: [webauthn] Default Algorithems for Authenticators perhaps need updating. (#2448) (Friday, 24 July)

Simone Onofri

• [w3c/webauthn] 207cf9: Removing style attribute for HTML validation durin... (Wednesday, 8 July)
• Re: 07/08/2026 W3C Web Authentication Meeting Agenda (Wednesday, 8 July)

Stephen Booth via GitHub

• Re: [webauthn] Multiple independent applications on one host (#2457) (Wednesday, 29 July)
• [webauthn] Multiple independent applications on one host (#2457) (Wednesday, 29 July)

Tim Cappalli

• [w3c/webauthn] 71545a: Typos and line breaks (Thursday, 30 July)
• [w3c/webauthn] 0e7f3c: Adds cross-device hint (Thursday, 30 July)
• [w3c/webauthn] 5481e3: Forbid authenticator data from containing cleartex... (Thursday, 30 July)
• [w3c/webauthn] e38d3b: Merge pull request #2449 from nsatragno/30_add_sim... (Tuesday, 21 July)
• [w3c/webauthn] 1d461c: Add explainer for simple PQC migration. (Tuesday, 21 July)
• [w3c/webauthn] c0a4be: Nina feedback (Monday, 20 July)
• [w3c/webauthn] 0b6443: Split out make vs get signature (Friday, 17 July)
• [w3c/webauthn] 5481e3: Forbid authenticator data from containing cleartex... (Wednesday, 15 July)
• [w3c/webauthn] d8d8b8: adds mise to local tooling (Thursday, 9 July)

Tim Cappalli via GitHub

• [webauthn] new commits pushed by timcappalli (Thursday, 30 July)
• [webauthn] new commits pushed by timcappalli (Thursday, 30 July)
• [webauthn] new commits pushed by timcappalli (Thursday, 30 July)
• Re: [webauthn] Multiple independent applications on one host (#2457) (Wednesday, 29 July)
• [webauthn] new commits pushed by timcappalli (Tuesday, 21 July)
• [webauthn] Merged Pull Request: Add explainer for simple PQC migration. (Tuesday, 21 July)
• [webauthn] new commits pushed by timcappalli (Monday, 20 July)
• [webauthn] new commits pushed by timcappalli (Friday, 17 July)
• Re: [webauthn] Add Cross Device Fallback URL extension for hybrid transport authentication (#2380) (Thursday, 16 July)
• [webauthn] new commits pushed by timcappalli (Wednesday, 15 July)
• Re: [webauthn] Adds mise to local tooling (#2443) (Thursday, 9 July)
• [webauthn] Pull Request: Adds mise to local tooling (Thursday, 9 July)
• [webauthn] new commits pushed by timcappalli (Thursday, 9 July)

W3C Webmaster via GitHub API

• Weekly github digest (WebAuthn) (Tuesday, 28 July)
• Weekly github digest (WebAuthn) (Tuesday, 21 July)
• Weekly github digest (WebAuthn) (Tuesday, 14 July)
• Weekly github digest (WebAuthn) (Tuesday, 7 July)

Zak via GitHub

• Re: [webauthn] Add "sign" extension (#2078) (Sunday, 26 July)

Last message date: Friday, 31 July 2026 13:01:13 UTC