09/09/2026 W3C Web Authentication Meeting Agenda
09/16/2026 W3C Web Authentication Meeting Agenda
09/23/2026 W3C Web Authentication Meeting Agenda
09/30/2026 W3C Web Authentication Meeting Agenda
[w3c/webauthn]
[w3c/webauthn] 1fcdbf: Simplify example and include server side
[w3c/webauthn] 21d32d: Update and rename ambient-sign-in.md to conditiona...
[w3c/webauthn] 278d0c: Update conditional-ui-without-autofill.md
[w3c/webauthn] 437cd7: Merge branch 'L3-REC'
[w3c/webauthn] 4a1c2b: Update alg upgrade explainer
[w3c/webauthn] 54fdc7: Remove files that haven't been touched in years
[w3c/webauthn] 5a0b03: Merge branch 'L4-FPWD'
[w3c/webauthn] 5eb491: Merge pull request #2474 from nsatragno/update_alg...
[w3c/webauthn] 630c98: Split back out reg vs auth
[w3c/webauthn] 6a8e85: Fix missing ASN.1 values in android-key test vector
[w3c/webauthn] 6d1a8c: Merge branch 'L3-REC'
[w3c/webauthn] 6e256f: Merge branch 'L3-REC'
[w3c/webauthn] 70f350: Merge branch 'L3-REC'
[w3c/webauthn] 7142b9: Update main for WebAuthn Level 4
[w3c/webauthn] 73a957: Update algorithm upgrades explainer
[w3c/webauthn] 798f4e: Remove note for MUST
[w3c/webauthn] 8889b4: Merge pull request #2476 from nsatragno/20_update_...
[w3c/webauthn] bec4da: Prepare WebAuthn Level 4 FPWD
[w3c/webauthn] c474ad: Merge pull request #2479 from w3c/merge-l3
[w3c/webauthn] cda9ea: Merge pull request #2463 from w3c/mm/repo-clean-up
[w3c/webauthn] fee027: remove dangling comma
[webauthn] 5.4.3 "the user handle ought not be" -> RFC 2119 Terminology (#2431)
[webauthn] [Editorial] Truncation description inaccurate (#1645)
[webauthn] Add a way for RPs to ensure registration of certain authenticator-supported UV methods (#2482)
- John Bradley via GitHub (Monday, 28 September)
- Thomas Duboucher via GitHub (Monday, 28 September)
- khurramhaneef-bit via GitHub (Monday, 28 September)
- Thomas Duboucher via GitHub (Saturday, 26 September)
- Michael Farrell via GitHub (Thursday, 24 September)
- khurramhaneef-bit via GitHub (Wednesday, 23 September)
- micolous via GitHub (Wednesday, 23 September)
- khurramhaneef-bit via GitHub (Wednesday, 23 September)
- micolous via GitHub (Wednesday, 23 September)
- khurramhaneef-bit via GitHub (Wednesday, 23 September)
- Matthew Miller via GitHub (Tuesday, 22 September)
- Matthew Miller via GitHub (Friday, 18 September)
[webauthn] Add Cross Device Fallback URL extension for hybrid transport authentication (#2380)
[webauthn] Add device binding to cross-device fallback URL extension (#2478)
[webauthn] Add hybrid fallback URL extension (#2341)
[webauthn] Backup state clarification (#2477)
[webauthn] Clearly define the way how RP handles the extensions (#1258)
[webauthn] Consider portable evidence manifests for attestation auditability (#2436)
[webauthn] Credential Backup clarification (note about older authenticators) (#2477)
[webauthn] Cross-RP batch enrollment of a backup security key (#2460)
[webauthn] double check whether the Secure Payment Confirmation effort has implications on the WebAuthn spec (#1492)
[webauthn] Explainer for Level 4 (#2297)
[webauthn] export definitions? (#1049)
[webauthn] Hint to deprioritize credential providers that hold a credential in excludeCredentials (#2458)
[webauthn] Mechanism for encoding *direction* metadata may need more work (#1644)
[webauthn] Merged Pull Request: Merge L3-REC into main
[webauthn] Merged Pull Request: Remove files that haven't been touched in years
[webauthn] Merged Pull Request: Update alg upgrade explainer
[webauthn] Merged Pull Request: Update algorithm upgrades explainer
[webauthn] Merged Pull Request: Update conditional UI without autofill explainer
[WebAuthn] New Charter and next steps
[webauthn] new commits pushed by emlun
[webauthn] new commits pushed by github-actions[bot]
[webauthn] new commits pushed by MasterKale
[webauthn] new commits pushed by nsatragno
[webauthn] new commits pushed by simoneonofri
[webauthn] new commits pushed by timcappalli
[webauthn] Pull Request: [Do not review yet] [PQ] Back up and restore overridden credentials
[webauthn] Pull Request: Merge L3-REC into main
[webauthn] Pull Request: Update alg upgrade explainer
[webauthn] Pull Request: Update algorithm upgrades explainer
[webauthn] Pull Request: Update conditional UI without autofill explainer
[webauthn] Pull Request: Update main for WebAuthn Level 4
[webauthn] Re-Open "confirmation" discussion (see PR#2020) (#2352)
[webauthn] Regarding the issue of Credential ID exposure(13.5.6), from what perspective should RP compare RK and NRK and which should be adopted? (#1484)
[webauthn] Should a CTAP2 virtual authenticator support CTAP1/U2F? (#2468)
[webauthn] Targeting EUDI Wallet et. al. for payments (#2480)
[webauthn] Update alg upgrade explainer (#2476)
[webauthn] Update algorithm upgrades explainer (#2474)
[webauthn] Update main for WebAuthn Level 4 (#2481)
Call for Exclusions: Web Authentication: An API for accessing Public Key Credentials - Level 4
Call for Participation: Web Authentication Working Group Charter approved; Join the Web Authentication Working Group
Closed: [webauthn] [Editorial] Truncation description inaccurate (#1645)
Closed: [webauthn] Call for editors for WebAuthn L4 (#2406)
Closed: [webauthn] Clearly define the way how RP handles the extensions (#1258)
Closed: [webauthn] double check whether the Secure Payment Confirmation effort has implications on the WebAuthn spec (#1492)
Closed: [webauthn] Explainer for Level 4 (#2297)
Closed: [webauthn] export definitions? (#1049)
Closed: [webauthn] Me (#2035)
Closed: [webauthn] Merge changes made in L3-CR branch into main (#2405)
Closed: [webauthn] Re-Open "confirmation" discussion (see PR#2020) (#2352)
Closed: [webauthn] Regarding the issue of Credential ID exposure(13.5.6), from what perspective should RP compare RK and NRK and which should be adopted? (#1484)
Closed: [webauthn] Sha (#2036)
Closed: [webauthn] Targeting EUDI Wallet et. al. for payments (#2480)
Weekly github digest (WebAuthn)
Last message date: Wednesday, 30 September 2026 18:51:02 UTC