public-webauthn@w3.org from July 2026 by subject

07/01/2026 W3C Web Authentication Meeting Agenda

07/08/2026 W3C Web Authentication Meeting Agenda

07/15/2026 W3C Web Authentication Meeting Agenda

07/29/2026 W3C Web Authentication Meeting Agenda

[w3c/webauthn]

[w3c/webauthn] 0b6443: Split out make vs get signature

[w3c/webauthn] 0e7f3c: Adds cross-device hint

[w3c/webauthn] 0f0b19: algPolicy-01

[w3c/webauthn] 19eded: algPolicyExplanationUpdate-01

[w3c/webauthn] 1c97d8: Simplify algPolicy Further - Explainer Update. (...

[w3c/webauthn] 1d461c: Add explainer for simple PQC migration.

[w3c/webauthn] 1d9b9d: algPolicySimplify

[w3c/webauthn] 207cf9: Removing style attribute for HTML validation durin...

[w3c/webauthn] 272848: Merge pull request #2382 from w3c/mm/add-signcount...

[w3c/webauthn] 36bd4d: Switch to bikeshed serve for local dev

[w3c/webauthn] 504e85: Fix command typo

[w3c/webauthn] 5481e3: Forbid authenticator data from containing cleartex...

[w3c/webauthn] 57e2b8: Refine processing steps for required signCount

[w3c/webauthn] 6571ea: Update signCount table value types

[w3c/webauthn] 6d051d: algPolicy-01

[w3c/webauthn] 71545a: Typos and line breaks

[w3c/webauthn] 8896cd: algPolicy-01

[w3c/webauthn] 89661c: Indent CreateCred-InvokeAuthnrMakeCred

[w3c/webauthn] 8b9d1b: Try to keep mise.toml next to mise.lock

[w3c/webauthn] 946462: Humanize the signCount table descriptions

[w3c/webauthn] 957cd5: algPolicySimplify

[w3c/webauthn] 9c8236: Introduce uv for dep management

[w3c/webauthn] a701a0: algPolicyExplainer_01

[w3c/webauthn] a78af7: Fix all issues with `bikeshed spec`

[w3c/webauthn] ac3c18: Update Set Cred Props to create a counter

[w3c/webauthn] bc6f06: Allow signCount to be optional in Set Cred Props

[w3c/webauthn] bd5c49: Merge pull request #2441 from w3c/mm-better-local-dev

[w3c/webauthn] c0a4be: Nina feedback

[w3c/webauthn] c0b284: algPolicyExplanationUpdate-02

[w3c/webauthn] c0f89e: Update processing steps with more `else if`

[w3c/webauthn] c38239: Define signCount parameter

[w3c/webauthn] c68b3f: Merge pull request #2442 from w3c/upgrade-to-bikes...

[w3c/webauthn] cbf89c: Upgrade to Bikeshed 7

[w3c/webauthn] d58b6c: Restore anchor comment

[w3c/webauthn] d8d8b8: adds mise to local tooling

[w3c/webauthn] df4594: algPolicy-01

[w3c/webauthn] e38d3b: Merge pull request #2449 from nsatragno/30_add_sim...

[w3c/webauthn] e8cc96: Simplify algPolicy Further - Explainer Update. (#...

[w3c/webauthn] f3f862: algPolicy-04

[w3c/webauthn] f678f9: Refine behavior when it's a null signCount

[webauthn] "Invoke the authenticatorMakeCredential operation" step is accidentally indented (#2444)

[webauthn] 5.4.3 "the user handle ought not be" -> RFC 2119 Terminology (#2431)

[webauthn] Add "Credential Manager Trust Group (CMTG) Key" extension (#2377)

[webauthn] Add "sign" extension (#2078)

[webauthn] Add Cross Device Fallback URL extension for hybrid transport authentication (#2380)

[webauthn] Add new batch attestation type for Merkle tree certifictes (#2456)

[webauthn] Adds additional hints for form factors (#2387)

[webauthn] Adds mise to local tooling (#2443)

[webauthn] Default Algorithems for Authenticators perhaps need updating. (#2448)

[webauthn] Extension input processing directions are inconsistent (#2439)

[webauthn] Fix compatibility with Bikeshed 7 (#2428)

[webauthn] Hint to deprioritize credential providers that hold a credential in excludeCredentials (#2458)

[webauthn] Introduce a better local development setup (#2441)

[webauthn] Merged Pull Request: Add explainer for simple PQC migration.

[webauthn] Merged Pull Request: Adds mise to local tooling

[webauthn] Merged Pull Request: chore: removing type attribute for HTML validation during spec generation

[webauthn] Merged Pull Request: Introduce a better local development setup

[webauthn] Merged Pull Request: Simplify Algorithm Migration Proposal Explainer

[webauthn] Merged Pull Request: Simplify algPolicy Further - Explainer Update.

[webauthn] Merged Pull Request: Update Virtual Authenticator API to better emulate synced passkey behavior

[webauthn] Merged Pull Request: Upgrade to Bikeshed 7

[webauthn] Missing validation of rpId before Related Origins fetch (#2422)

[webauthn] Multiple independent applications on one host (#2457)

[webauthn] new commits pushed by akshayku

[webauthn] new commits pushed by github-actions[bot]

[webauthn] new commits pushed by MasterKale

[webauthn] new commits pushed by nsatragno

[webauthn] new commits pushed by timcappalli

[webauthn] Post Quantum Crypto and WebAuthn Transition for RP (#2417)

[webauthn] Pull Request: [WIP] Add virtual authenticator support for CMTG keys

[webauthn] Pull Request: Add explainer for simple PQC migration.

[webauthn] Pull Request: Adds mise to local tooling

[webauthn] Pull Request: Clarify that credentialId in Virtual Authenticator URLs is base64url encoded

[webauthn] Pull Request: Introduce a better local development setup

[webauthn] Pull Request: Simplify Algorithm Migration Proposal Explainer

[webauthn] Pull Request: Simplify algPolicy Further - Explainer Update.

[webauthn] Pull Request: Upgrade to Bikeshed 7

[webauthn] Re-Open "confirmation" discussion (see PR#2020) (#2352)

[webauthn] Support Algorithm Migration (#2437)

[webauthn] Update Virtual Authenticator API to better emulate synced passkey behavior (#2382)

[webauthn] Upgrade to Bikeshed 7 (#2442)

[webauthn] Virtual authenticator large blob commands should clarify that the credential must be discoverable (#2452)

[webauthn] Virtual authenticator set credential properties and remove credential should clarify that credentialId is base64 url encoded (#2450)

[webauthn] Virtual authenticator should allow `counter` to always be `0` (#2363)

[webauthn] Virtual authenticator should clarify that ctap2/u2f authenticator cannot have transport=internal (and others). (#2453)

[webauthn] Virtual authenticator should clarify what happens when you add a credential with the same { rp id, user id } as an existing credential. (#2459)

[webauthn] Virtual authenticator should specify the error code when the signature counter is missing. (#2454)

[webauthn] Virtual Authenticator's add credential should probably support more algorithms than ECDSA (#2446)

[webauthn] Virtual Authenticator's get credential should specify how the credential object is serialized (#2447)

Closed: [webauthn] Fix compatibility with Bikeshed 7 (#2428)

Closed: [webauthn] Virtual authenticator should specify the error code when the signature counter is missing. (#2454)

Formal Proposal: A Deterministic (No-Token) Alternative to DBSC

Weekly github digest (WebAuthn)

Last message date: Friday, 31 July 2026 13:01:13 UTC