Federated Identity Working Group - Activity
No matches.
TR publications
-
2 documents published.
-
Digital Credentials published twice as a Working Draft. History of Digital Credentials
-
Past meetings
Participants
-
1 participant joined.
-
Mallikarjuna Potta (PayPal) joined.
-
-
2 participants left.
-
Christian Bormann (SPRIND GmbH) left.
-
Kristina Yasuda (SPRIND GmbH) left.
-
-
1 organization joined.
-
PayPal joined.
-
-
1 organization left.
-
SPRIND GmbH left.
-
GitHub
w3c-fedid/digital-credentials
-
3 issues opened.
-
Verifier authenticity and ecosystem barrier to entry w3c-fedid/digital-credentials#594, by @wes-smith.
-
Multi-credential flows require a separate wallet handoff for every step w3c-fedid/digital-credentials#593, by @wes-smith.
-
Document the role of architectural layering in the Digital Credentials API w3c-fedid/digital-credentials#589, by @hlflanagan.
-
-
4 issues closed.
-
Protocol Integrity Requirements for Request/Response Tampering w3c-fedid/digital-credentials#494.
-
Adding Signature as Response for Tampering and consider Encryption w3c-fedid/digital-credentials#479.
-
Horizontal Review - Privacy w3c-fedid/digital-credentials#232.
-
Security Considerations: Assumptions (System Layer and Network Layer) w3c-fedid/digital-credentials#273.
-
-
11 issues received 22 new comments.
-
Annex C being optional w3c-fedid/digital-credentials#578 (6 comments by @c2bo, @marcoscaceres, @TallTed)
-
Conditional invocation for Digital Credential presentation requests w3c-fedid/digital-credentials#587 (6 comments by @mallikarjunap, @marcoscaceres, @timcappalli, @wseltzer)
-
Wallet Selection Binding during Issuance w3c-fedid/digital-credentials#382 (2 comments by @c2bo, @leecam)
-
Verifier authenticity and ecosystem barrier to entry w3c-fedid/digital-credentials#594 (1 comment by @donaldzitzer406-lang)
-
Protocol Integrity Requirements for Request/Response Tampering w3c-fedid/digital-credentials#494 (1 comment by @simoneonofri)
-
Adding Signature as Response for Tampering and consider Encryption w3c-fedid/digital-credentials#479 (1 comment by @simoneonofri)
-
Horizontal Review Preparation: DC API w3c-fedid/digital-credentials#227 (1 comment by @marcoscaceres)
-
Define concrete privacy and security requirements for the supported protocols w3c-fedid/digital-credentials#255 (1 comment by @marcoscaceres)
-
Document the role of architectural layering in the Digital Credentials API w3c-fedid/digital-credentials#589 (1 comment by @marcoscaceres)
-
Security Considerations: Assumptions (System Layer and Network Layer) w3c-fedid/digital-credentials#273 (1 comment by @simoneonofri)
-
Rate limiting: implementer considerations w3c-fedid/digital-credentials#495 (1 comment by @marcoscaceres)
-
-
4 pull requests opened.
-
chore: point README and explainer at the new self-review page w3c-fedid/digital-credentials#592, by @marcoscaceres.
-
Editorial: link "object" to the ECMAScript Object type w3c-fedid/digital-credentials#591, by @marcoscaceres.
-
editorial: say when response encryption protects against in-page scripts w3c-fedid/digital-credentials#590, by @marcoscaceres.
-
Proposal: conditional mediation for digital credential presentation requests w3c-fedid/digital-credentials#588, by @mallikarjunap.
-
-
3 pull requests merged.
-
editorial: say when response encryption protects against in-page scripts w3c-fedid/digital-credentials#590.
-
chore: point README and explainer at the new self-review page w3c-fedid/digital-credentials#592, by @marcoscaceres.
-
Editorial: link "object" to the ECMAScript Object type w3c-fedid/digital-credentials#591.
-
-
7 pull requests received 33 new comments.
-
Add verifier hardening guidance for script injection w3c-fedid/digital-credentials#539 (17 comments by @marcoscaceres, @mikewest)
-
Specify protocol validation + enforce encryption w3c-fedid/digital-credentials#520 (9 comments by @c2bo, @marcoscaceres, @martijnharing)
-
Editorial: link "object" to the ECMAScript Object type w3c-fedid/digital-credentials#591 (2 comments by @marcoscaceres)
-
Clarify network and protocol tampering threats w3c-fedid/digital-credentials#493 (2 comments by @marcoscaceres)
-
editorial: say when response encryption protects against in-page scripts w3c-fedid/digital-credentials#590 (1 comment by @timcappalli)
-
Proposal: conditional mediation for digital credential presentation requests w3c-fedid/digital-credentials#588 (1 comment by @timcappalli)
-
Apply friction when a request carries no signature to check w3c-fedid/digital-credentials#575 (1 comment by @marcoscaceres)
-
w3c-fedid/FedCM
-
8 issues closed.
-
Support for SAML w3c-fedid/FedCM#479.
-
What is disclosure_text_shown? w3c-fedid/FedCM#475.
-
Autoreauthentication does not work with "silent" mediation value w3c-fedid/FedCM#472.
-
Should FedCM spec have conformance requirements over IDPs w3c-fedid/FedCM#471.
-
Align on user flow for initial and returning FedCM prompts w3c-fedid/FedCM#469.
-
Contextualize account selection w3c-fedid/FedCM#450.
-
The IDP has to support additional infrastructure to support FedCM w3c-fedid/FedCM#441.
-
[Context API] - Authz / relation to ability to specificy scope w3c-fedid/FedCM#407.
-
-
8 issues received 9 new comments.
-
w3c-fedid/FedCM#479 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#475 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#472 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#471 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#469 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#450 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#407 (1 comment by @hlflanagan)
-
2 pull requests opened.
-
Added Privacy Policy, Terms of Service, Account Manager Url fields to IDP Config file w3c-fedid/FedCM#847, by @abhishekmadan30.
-
1 pull request closed.
-
1 pull request received 1 new comment.
-
Strictly Editorial Refactoring to make merging/extending the Registration, Delegation and Accounts Push spec easier w3c-fedid/FedCM#848 (1 comment by @samuelgoto)
-
TR publications
-
2 documents published.
-
Digital Credentials published twice as a Working Draft. History of Digital Credentials
-
Past meetings
Participants
-
2 participants joined.
-
Ling Zhong (Microsoft Corporation) joined.
-
Christian Biesinger (Igalia) joined.
-
-
1 participant left.
-
Torsten Lodderstedt (SPRIND GmbH) left.
-
-
1 organization joined.
-
Igalia joined.
-
GitHub
w3c-fedid/digital-credentials
-
1 issue opened.
-
Conditional invocation for Digital Credential presentation requests w3c-fedid/digital-credentials#587, by @mallikarjunap.
-
-
3 issues closed.
-
Add a diagram showing how things in the model relate to each other w3c-fedid/digital-credentials#66.
-
Update scope around issuance/create to be specific to credential manager selection w3c-fedid/digital-credentials#343.
-
Add testing action to simulate platform error mapping in the "present" algorithm w3c-fedid/digital-credentials#500.
-
-
3 issues received 11 new comments.
-
Annex C being optional w3c-fedid/digital-credentials#578 (8 comments by @bc-pi, @hlflanagan, @marcoscaceres, @TallTed)
-
Add testing action to simulate platform error mapping in the "present" algorithm w3c-fedid/digital-credentials#500 (1 comment by @marcoscaceres)
-
-
1 pull request opened.
-
Platform-bound wallet attestation for issuance (#382) w3c-fedid/digital-credentials#586, by @mohamedamir.
-
-
3 pull requests merged.
-
Add Credential Manager Chooser def and add clarity around differences with issuance w3c-fedid/digital-credentials#561.
-
Privacy: Add Data Clearing and Credential Availability protections w3c-fedid/digital-credentials#536.
-
Restore the origin-bound declaration on DigitalCredential w3c-fedid/digital-credentials#559.
-
-
9 pull requests received 55 new comments.
-
Add verifier hardening guidance for script injection w3c-fedid/digital-credentials#539 (16 comments by @marcoscaceres, @mikewest, @simoneonofri, @TallTed, @timcappalli)
-
Specify protocol validation + enforce encryption w3c-fedid/digital-credentials#520 (11 comments by @marcoscaceres, @mohamedamir, @simoneonofri, @TallTed)
-
Platform-bound wallet attestation for issuance (#382) w3c-fedid/digital-credentials#586 (10 comments by @hlflanagan, @marcoscaceres, @npdoty, @TallTed)
-
Add security considerations on forged credential chooser requests w3c-fedid/digital-credentials#506 (7 comments by @hlflanagan, @marcoscaceres, @mohamedamir, @TallTed)
-
Privacy: Add Data Clearing and Credential Availability protections w3c-fedid/digital-credentials#536 (7 comments by @marcoscaceres, @mohamedamir)
-
Add document origin to request context w3c-fedid/digital-credentials#512 (1 comment by @marcoscaceres)
-
w3c-fedid/digital-credentials#585 (1 comment by @w3cbot)
-
Add Credential Manager Chooser def and add clarity around differences with issuance w3c-fedid/digital-credentials#561 (1 comment by @timcappalli)
-
w3c-fedid/digital-credentials#584 (1 comment by @w3cbot)
-
w3c-fedid/FedCM
-
1 issue opened.
-
Unclear as to how the Fields API response is returned in current editors draft w3c-fedid/FedCM#846, by @ThisIsMissEm.
-
-
9 issues received 13 new comments.
-
w3c-fedid/FedCM#479 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#475 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#472 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#471 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#469 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#450 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#441 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#407 (1 comment by @hlflanagan)
-
1 pull request received 5 new comments.
TR publications
-
6 documents published.
-
Digital Credentials published 6 times as a Working Draft. History of Digital Credentials
-
Past meetings
-
7 meetings.
Participants
-
2 participants joined.
-
Naomi Yoshizawa (W3C) joined.
-
Marie Jordan (Visa) joined.
-
-
2 participants left.
-
Christian Biesinger (Igalia) left.
-
Siddhartha Pandey (Microsoft Corporation) left.
-
GitHub
w3c-fedid/digital-credentials
-
6 issues opened.
-
Supporting a "receipt"-style API or callback w3c-fedid/digital-credentials#583, by @timcappalli.
-
空 w3c-fedid/digital-credentials#581, by @turuekarasu0120-star.
-
空 w3c-fedid/digital-credentials#580, by @takagimasao52-cmyk.
-
Annex C being optional w3c-fedid/digital-credentials#578, by @bc-pi.
-
clientData (26H2 edition) w3c-fedid/digital-credentials#574, by @timcappalli.
-
Should we warn the user when a request is not properly protected? w3c-fedid/digital-credentials#571, by @marcoscaceres.
-
-
8 issues closed.
-
EUDI Wallet functional conformance testing w3c-fedid/digital-credentials#471.
-
Define error handling w3c-fedid/digital-credentials#130.
-
空 w3c-fedid/digital-credentials#581.
-
空 w3c-fedid/digital-credentials#580.
-
Unsigned requests can defeat the required response encryption w3c-fedid/digital-credentials#568.
-
User agent request validation and errors w3c-fedid/digital-credentials#472.
-
What protocols should a user agent implement? w3c-fedid/digital-credentials#439.
-
Horizontal Review - Internationalization w3c-fedid/digital-credentials#231.
-
-
1 issue reopened.
-
Define error handling w3c-fedid/digital-credentials#130, by @marcoscaceres.
-
-
9 issues received 22 new comments.
-
Wallet Selection Binding during Issuance w3c-fedid/digital-credentials#382 (5 comments by @hlflanagan, @hlozi, @mohamedamir, @timcappalli, @ve7jtb)
-
EUDI Wallet functional conformance testing w3c-fedid/digital-credentials#471 (3 comments by @hlflanagan, @marcoscaceres)
-
clientData (26H2 edition) w3c-fedid/digital-credentials#574 (3 comments by @hlflanagan, @marcoscaceres)
-
Should we warn the user when a request is not properly protected? w3c-fedid/digital-credentials#571 (3 comments by @bc-pi, @marcoscaceres)
-
Add testing action to simulate platform error mapping in the "present" algorithm w3c-fedid/digital-credentials#500 (1 comment by @marcoscaceres)
-
require in-context in-content explanation and an element for user-initiated presentation w3c-fedid/digital-credentials#208 (1 comment by @hlflanagan)
-
-
3 pull requests opened.
-
Apply friction when a request carries no signature to check w3c-fedid/digital-credentials#575, by @marcoscaceres.
-
Editorial: deduplicate request prologue between get() and create() w3c-fedid/digital-credentials#573, by @mohamedamir.
-
chore: add CI check for committed CRLF line endings w3c-fedid/digital-credentials#572, by @marcoscaceres.
-
-
9 pull requests merged.
-
Security: Expand Threat Model and mitigate malicious payloads w3c-fedid/digital-credentials#533.
-
Add security considerations on signing presentation requests w3c-fedid/digital-credentials#569.
-
Classify validation failures into specific exception types w3c-fedid/digital-credentials#515.
-
Require support for all presentation protocols w3c-fedid/digital-credentials#454.
-
Filter requests to supported protocols before consuming user activation w3c-fedid/digital-credentials#558.
-
Editorial: deduplicate request prologue between get() and create() w3c-fedid/digital-credentials#573.
-
Fail with InvalidStateError when the document is not fully active at call time w3c-fedid/digital-credentials#557.
-
chore: add CI check for committed CRLF line endings w3c-fedid/digital-credentials#572.
-
Explain error behavior in WebDriver extension w3c-fedid/digital-credentials#556.
-
-
2 pull requests closed.
-
Add requestOrigin attribute to DigitalCredential w3c-fedid/digital-credentials#567.
-
All requests must go to client platform for cross-device w3c-fedid/digital-credentials#474.
-
-
25 pull requests received 112 new comments.
-
Add security considerations on signing presentation requests w3c-fedid/digital-credentials#569 (13 comments by @marcoscaceres, @mohamedamir, @TallTed)
-
Require support for all presentation protocols w3c-fedid/digital-credentials#454 (10 comments by @bc-pi, @hlflanagan, @marcoscaceres, @MasterKale, @mohamedamir, @TallTed, @timcappalli)
-
Clarify network and protocol tampering threats w3c-fedid/digital-credentials#493 (9 comments by @marcoscaceres, @mohamedamir, @simoneonofri)
-
Add security considerations on forged credential chooser requests w3c-fedid/digital-credentials#506 (8 comments by @marcoscaceres, @mohamedamir)
-
Restore the origin-bound declaration on DigitalCredential w3c-fedid/digital-credentials#559 (8 comments by @hlflanagan, @marcoscaceres, @mohamedamir)
-
Add Credential Manager Chooser def and add clarity around differences with issuance w3c-fedid/digital-credentials#561 (8 comments by @hlflanagan, @marcoscaceres, @mohamedamir)
-
Add document origin to request context w3c-fedid/digital-credentials#512 (8 comments by @hlflanagan, @marcoscaceres, @TallTed, @timcappalli)
-
Privacy: Add Data Clearing and Credential Availability protections w3c-fedid/digital-credentials#536 (7 comments by @hlflanagan, @marcoscaceres, @mohamedamir)
-
Security: Expand Threat Model and mitigate malicious payloads w3c-fedid/digital-credentials#533 (6 comments by @hlflanagan, @marcoscaceres, @mohamedamir)
-
Classify validation failures into specific exception types w3c-fedid/digital-credentials#515 (5 comments by @hlflanagan, @marcoscaceres, @MasterKale)
-
Privacy Considerations: ecosystem note and per-protocol privacy review w3c-fedid/digital-credentials#543 (4 comments by @marcoscaceres)
-
Editorial: deduplicate request prologue between get() and create() w3c-fedid/digital-credentials#573 (4 comments by @marcoscaceres, @mohamedamir)
-
chore: add CI check for committed CRLF line endings w3c-fedid/digital-credentials#572 (3 comments by @marcoscaceres, @TallTed)
-
Add requestOrigin attribute to DigitalCredential w3c-fedid/digital-credentials#567 (3 comments by @hlflanagan, @marcoscaceres)
-
Add verifier hardening guidance for script injection w3c-fedid/digital-credentials#539 (3 comments by @marcoscaceres, @mohamedamir)
-
Skip requests that fail validation instead of throwing w3c-fedid/digital-credentials#554 (2 comments by @marcoscaceres)
-
Filter requests to supported protocols before consuming user activation w3c-fedid/digital-credentials#558 (2 comments by @marcoscaceres, @mohamedamir)
-
Specify protocol validation + enforce encryption w3c-fedid/digital-credentials#520 (2 comments by @marcoscaceres, @wseltzer)
-
w3c-fedid/digital-credentials#582 (1 comment by @w3cbot)
-
w3c-fedid/digital-credentials#579 (1 comment by @w3cbot)
-
w3c-fedid/digital-credentials#577 (1 comment by @w3cbot)
-
w3c-fedid/digital-credentials#576 (1 comment by @w3cbot)
-
Apply friction when a request carries no signature to check w3c-fedid/digital-credentials#575 (1 comment by @MasterKale)
-
All requests must go to client platform for cross-device w3c-fedid/digital-credentials#474 (1 comment by @marcoscaceres)
-
w3c-fedid/digital-credentials#570 (1 comment by @w3cbot)
-
w3c-fedid/FedCM
-
7 issues closed.
-
Add note about PP / TOS w3c-fedid/FedCM#312.
-
Clarify the IDP API response when the user is not signed in. w3c-fedid/FedCM#218.
-
Support for RP controls to support meaningful integration into their user flows w3c-fedid/FedCM#348.
-
[Technical] Manifest fetching should happen sequentially w3c-fedid/FedCM#293.
-
Support for cascaded/staged federation scenarios w3c-fedid/FedCM#264.
-
Additional Use-Cases: Active Session Discovery, Auto Sign-On w3c-fedid/FedCM#14.
-
Conceptual Scope w.r.t. OpenID Connect/OAuth 2.0 w3c-fedid/FedCM#5.
-
-
10 issues received 12 new comments.
-
Specify the border between FedCM and protocols building on it w3c-fedid/FedCM#764 (3 comments by @okayame702-png)
-
w3c-fedid/FedCM#380 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#312 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#218 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#348 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#293 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#264 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#14 (1 comment by @hlflanagan)
-
w3c-fedid/FedCM#5 (1 comment by @hlflanagan)
-
-
1 pull request received 14 new comments.
-
Add initial Identity Handler SW Registration Tie In. w3c-fedid/FedCM#842 (14 comments by @Brandr0id, @npm1)
-
w3c-fedid/meetings
-
1 pull request opened.
-
Update notes on requestOrigin attribute discussion w3c-fedid/meetings#7, by @TallTed.
-