public-webauthn@w3.org from September 2026 by author

Addison Phillips via GitHub

• Re: [webauthn] [Editorial] Truncation description inaccurate (#1645) (Wednesday, 30 September)

Anders Rundgren via GitHub

• Re: [webauthn] Targeting EUDI Wallet et. al. for payments (#2480) (Thursday, 17 September)
• [webauthn] Targeting EUDI Wallet et. al. for payments (#2480) (Tuesday, 15 September)

ANTHONY J NADALIN

• 09/23/2026 W3C Web Authentication Meeting Agenda (Wednesday, 23 September)
• 09/09/2026 W3C Web Authentication Meeting Agenda (Wednesday, 9 September)

ANTHONY NADALIN

• 09/30/2026 W3C Web Authentication Meeting Agenda (Tuesday, 29 September)
• 09/16/2026 W3C Web Authentication Meeting Agenda (Wednesday, 16 September)

Anthony Nadalin via GitHub

• Closed: [webauthn] Me (#2035) (Tuesday, 29 September)
• Closed: [webauthn] Sha (#2036) (Tuesday, 29 September)
• Closed: [webauthn] Merge changes made in L3-CR branch into main (#2405) (Tuesday, 29 September)
• Closed: [webauthn] Re-Open "confirmation" discussion (see PR#2020) (#2352) (Wednesday, 16 September)
• Re: [webauthn] Re-Open "confirmation" discussion (see PR#2020) (#2352) (Wednesday, 16 September)
• Closed: [webauthn] Call for editors for WebAuthn L4 (#2406) (Wednesday, 16 September)

David Waite via GitHub

• Re: [webauthn] Add hybrid fallback URL extension (#2341) (Tuesday, 15 September)

Emil Lundberg

• [w3c/webauthn] c474ad: Merge pull request #2479 from w3c/merge-l3 (Thursday, 10 September)
• [w3c/webauthn] (Thursday, 10 September)
• [w3c/webauthn] 6a8e85: Fix missing ASN.1 values in android-key test vector (Thursday, 10 September)
• [w3c/webauthn] 6d1a8c: Merge branch 'L3-REC' (Wednesday, 9 September)
• [w3c/webauthn] 437cd7: Merge branch 'L3-REC' (Wednesday, 9 September)
• [w3c/webauthn] 6e256f: Merge branch 'L3-REC' (Wednesday, 9 September)
• [w3c/webauthn] 70f350: Merge branch 'L3-REC' (Wednesday, 9 September)

Emil Lundberg via GitHub

• Closed: [webauthn] [Editorial] Truncation description inaccurate (#1645) (Wednesday, 30 September)
• Re: [webauthn] [Editorial] Truncation description inaccurate (#1645) (Wednesday, 30 September)
• Re: [webauthn] Clearly define the way how RP handles the extensions (#1258) (Wednesday, 23 September)
• Closed: [webauthn] Clearly define the way how RP handles the extensions (#1258) (Wednesday, 23 September)
• Re: [webauthn] Consider portable evidence manifests for attestation auditability (#2436) (Friday, 18 September)
• Re: [webauthn] Update main for WebAuthn Level 4 (#2481) (Friday, 18 September)
• [webauthn] new commits pushed by emlun (Friday, 18 September)
• [webauthn] new commits pushed by emlun (Thursday, 10 September)
• [webauthn] new commits pushed by emlun (Thursday, 10 September)
• [webauthn] Merged Pull Request: Merge L3-REC into main (Thursday, 10 September)
• [webauthn] Pull Request: Merge L3-REC into main (Wednesday, 9 September)
• [webauthn] new commits pushed by emlun (Wednesday, 9 September)
• [webauthn] new commits pushed by emlun (Wednesday, 9 September)
• [webauthn] new commits pushed by emlun (Wednesday, 9 September)
• [webauthn] new commits pushed by emlun (Wednesday, 9 September)

github-actions[bot] via GitHub

• [webauthn] new commits pushed by github-actions[bot] (Friday, 25 September)
• [webauthn] new commits pushed by github-actions[bot] (Thursday, 10 September)
• [webauthn] new commits pushed by github-actions[bot] (Wednesday, 9 September)
• [webauthn] new commits pushed by github-actions[bot] (Thursday, 3 September)
• [webauthn] new commits pushed by github-actions[bot] (Wednesday, 2 September)

Isaiah Inuwa via GitHub

• Re: [webauthn] Add device binding to cross-device fallback URL extension (#2478) (Tuesday, 8 September)
• Re: [webauthn] Add Cross Device Fallback URL extension for hybrid transport authentication (#2380) (Tuesday, 8 September)
• [webauthn] Add device binding to cross-device fallback URL extension (#2478) (Tuesday, 8 September)
• Re: [webauthn] Add Cross Device Fallback URL extension for hybrid transport authentication (#2380) (Wednesday, 2 September)

John Bradley via GitHub

• Re: [webauthn] Add a way for RPs to ensure registration of certain authenticator-supported UV methods (#2482) (Monday, 28 September)

Ken Buchanan

• [w3c/webauthn] 278d0c: Update conditional-ui-without-autofill.md (Friday, 25 September)
• [w3c/webauthn] 21d32d: Update and rename ambient-sign-in.md to conditiona... (Friday, 25 September)

Ken Buchanan via GitHub

• [webauthn] Pull Request: Update conditional UI without autofill explainer (Thursday, 24 September)

khurramhaneef-bit via GitHub

• Re: [webauthn] Add a way for RPs to ensure registration of certain authenticator-supported UV methods (#2482) (Monday, 28 September)
• Re: [webauthn] Add a way for RPs to ensure registration of certain authenticator-supported UV methods (#2482) (Wednesday, 23 September)
• Re: [webauthn] Add a way for RPs to ensure registration of certain authenticator-supported UV methods (#2482) (Wednesday, 23 September)
• Re: [webauthn] Add a way for RPs to ensure registration of certain authenticator-supported UV methods (#2482) (Wednesday, 23 September)

Matthew Miller

• [w3c/webauthn] cda9ea: Merge pull request #2463 from w3c/mm/repo-clean-up (Wednesday, 9 September)
• [w3c/webauthn] (Wednesday, 9 September)
• [w3c/webauthn] 54fdc7: Remove files that haven't been touched in years (Wednesday, 9 September)
• [w3c/webauthn] 8889b4: Merge pull request #2476 from nsatragno/20_update_... (Thursday, 3 September)
• [w3c/webauthn] 4a1c2b: Update alg upgrade explainer (Thursday, 3 September)
• [w3c/webauthn] 5eb491: Merge pull request #2474 from nsatragno/update_alg... (Wednesday, 2 September)
• [w3c/webauthn] 73a957: Update algorithm upgrades explainer (Wednesday, 2 September)

Matthew Miller via GitHub

• Re: [webauthn] Mechanism for encoding *direction* metadata may need more work (#1644) (Wednesday, 23 September)
• Re: [webauthn] Add a way for RPs to ensure registration of certain authenticator-supported UV methods (#2482) (Tuesday, 22 September)
• [webauthn] Add a way for RPs to ensure registration of certain authenticator-supported UV methods (#2482) (Friday, 18 September)
• Re: [webauthn] export definitions? (#1049) (Wednesday, 16 September)
• Closed: [webauthn] export definitions? (#1049) (Wednesday, 16 September)
• [webauthn] new commits pushed by MasterKale (Wednesday, 9 September)
• [webauthn] new commits pushed by MasterKale (Wednesday, 9 September)
• [webauthn] Merged Pull Request: Remove files that haven't been touched in years (Wednesday, 9 September)
• [webauthn] new commits pushed by MasterKale (Thursday, 3 September)
• [webauthn] Merged Pull Request: Update alg upgrade explainer (Thursday, 3 September)
• [webauthn] new commits pushed by MasterKale (Wednesday, 2 September)
• [webauthn] Merged Pull Request: Update algorithm upgrades explainer (Wednesday, 2 September)

Michael Farrell via GitHub

• Re: [webauthn] Add a way for RPs to ensure registration of certain authenticator-supported UV methods (#2482) (Thursday, 24 September)

micolous via GitHub

• Re: [webauthn] Add a way for RPs to ensure registration of certain authenticator-supported UV methods (#2482) (Wednesday, 23 September)
• Re: [webauthn] Credential Backup clarification (note about older authenticators) (#2477) (Wednesday, 23 September)
• Re: [webauthn] Add a way for RPs to ensure registration of certain authenticator-supported UV methods (#2482) (Wednesday, 23 September)
• Re: [webauthn] Credential Backup clarification (note about older authenticators) (#2477) (Friday, 18 September)
• Re: [webauthn] Credential Backup clarification (note about older authenticators) (#2477) (Friday, 18 September)
• Re: [webauthn] Should a CTAP2 virtual authenticator support CTAP1/U2F? (#2468) (Tuesday, 1 September)

My1 via GitHub

• Re: [webauthn] Credential Backup clarification (note about older authenticators) (#2477) (Friday, 18 September)
• Re: [webauthn] 5.4.3 "the user handle ought not be" -> RFC 2119 Terminology (#2431) (Friday, 4 September)
• [webauthn] Backup state clarification (#2477) (Friday, 4 September)

Nina Satragno via GitHub

• [webauthn] new commits pushed by nsatragno (Friday, 25 September)
• [webauthn] Merged Pull Request: Update conditional UI without autofill explainer (Friday, 25 September)
• Re: [webauthn] Update alg upgrade explainer (#2476) (Thursday, 3 September)
• [webauthn] Pull Request: Update alg upgrade explainer (Thursday, 3 September)
• [webauthn] Pull Request: [Do not review yet] [PQ] Back up and restore overridden credentials (Wednesday, 2 September)
• Re: [webauthn] Update algorithm upgrades explainer (#2474) (Wednesday, 2 September)
• Re: [webauthn] Update algorithm upgrades explainer (#2474) (Wednesday, 2 September)
• [webauthn] Pull Request: Update algorithm upgrades explainer (Wednesday, 2 September)

Simone Onofri

• [w3c/webauthn] 5a0b03: Merge branch 'L4-FPWD' (Friday, 18 September)
• [w3c/webauthn] 7142b9: Update main for WebAuthn Level 4 (Friday, 18 September)
• [WebAuthn] New Charter and next steps (Friday, 11 September)
• [w3c/webauthn] 6a8e85: Fix missing ASN.1 values in android-key test vector (Thursday, 10 September)
• [w3c/webauthn] bec4da: Prepare WebAuthn Level 4 FPWD (Wednesday, 9 September)

Simone Onofri via GitHub

• Re: [webauthn] Update main for WebAuthn Level 4 (#2481) (Wednesday, 23 September)
• [webauthn] Pull Request: Update main for WebAuthn Level 4 (Friday, 18 September)
• [webauthn] new commits pushed by simoneonofri (Friday, 18 September)
• [webauthn] new commits pushed by simoneonofri (Thursday, 10 September)
• [webauthn] new commits pushed by simoneonofri (Wednesday, 9 September)

Thomas Duboucher via GitHub

• Re: [webauthn] Add a way for RPs to ensure registration of certain authenticator-supported UV methods (#2482) (Monday, 28 September)
• Re: [webauthn] Add a way for RPs to ensure registration of certain authenticator-supported UV methods (#2482) (Saturday, 26 September)

Tim Cappalli

• [w3c/webauthn] 798f4e: Remove note for MUST (Wednesday, 23 September)
• [w3c/webauthn] 630c98: Split back out reg vs auth (Wednesday, 23 September)
• [w3c/webauthn] 1fcdbf: Simplify example and include server side (Wednesday, 23 September)
• [w3c/webauthn] fee027: remove dangling comma (Wednesday, 23 September)

Tim Cappalli via GitHub

• Re: [webauthn] Explainer for Level 4 (#2297) (Tuesday, 29 September)
• Closed: [webauthn] Explainer for Level 4 (#2297) (Tuesday, 29 September)
• Re: [webauthn] Hint to deprioritize credential providers that hold a credential in excludeCredentials (#2458) (Tuesday, 29 September)
• Re: [webauthn] Cross-RP batch enrollment of a backup security key (#2460) (Tuesday, 29 September)
• [webauthn] new commits pushed by timcappalli (Wednesday, 23 September)
• [webauthn] new commits pushed by timcappalli (Wednesday, 23 September)
• Re: [webauthn] Regarding the issue of Credential ID exposure(13.5.6), from what perspective should RP compare RK and NRK and which should be adopted? (#1484) (Wednesday, 23 September)
• Closed: [webauthn] Regarding the issue of Credential ID exposure(13.5.6), from what perspective should RP compare RK and NRK and which should be adopted? (#1484) (Wednesday, 23 September)
• Re: [webauthn] double check whether the Secure Payment Confirmation effort has implications on the WebAuthn spec (#1492) (Wednesday, 23 September)
• Closed: [webauthn] double check whether the Secure Payment Confirmation effort has implications on the WebAuthn spec (#1492) (Wednesday, 23 September)
• [webauthn] new commits pushed by timcappalli (Wednesday, 23 September)
• [webauthn] new commits pushed by timcappalli (Wednesday, 23 September)
• Re: [webauthn] Targeting EUDI Wallet et. al. for payments (#2480) (Wednesday, 16 September)
• Closed: [webauthn] Targeting EUDI Wallet et. al. for payments (#2480) (Wednesday, 16 September)
• Re: [webauthn] Consider portable evidence manifests for attestation auditability (#2436) (Wednesday, 16 September)
• Re: [webauthn] Add device binding to cross-device fallback URL extension (#2478) (Tuesday, 8 September)

W3C Patent Policy

• Call for Exclusions: Web Authentication: An API for accessing Public Key Credentials - Level 4 (Tuesday, 15 September)

W3C Webmaster via GitHub API

• Weekly github digest (WebAuthn) (Tuesday, 29 September)
• Weekly github digest (WebAuthn) (Tuesday, 22 September)
• Weekly github digest (WebAuthn) (Tuesday, 15 September)
• Weekly github digest (WebAuthn) (Tuesday, 8 September)
• Weekly github digest (WebAuthn) (Tuesday, 1 September)

Xueyuan Jia

• Call for Participation: Web Authentication Working Group Charter approved; Join the Web Authentication Working Group (Friday, 11 September)

Zachary Thomas Stolz via GitHub

• Re: [webauthn] Add device binding to cross-device fallback URL extension (#2478) (Friday, 18 September)

Last message date: Wednesday, 30 September 2026 18:51:02 UTC