Web Authentication Working Group - Activity
No matches.
Past meetings
Participants
-
5 participants joined.
-
sanchit singal (PayPal) joined.
-
Velvizhi Rajendran (PayPal) joined.
-
Animesh Kondiparthy (PayPal) joined.
-
Sharanya Chandrasekaran (PayPal) joined.
-
Siddharth Mangesh Gothoskar (PayPal) joined.
-
-
3 participants left.
-
Anthony Joseph Castillo (Rakuten Group, Inc.) left.
-
Ankit Kohli (PayPal) left.
-
Haribalu V (PayPal) left.
-
-
4 organizations joined.
-
Rakuten Group, Inc. joined.
-
Futurae Technologies AG joined.
-
PayPal joined.
-
Amazon joined.
-
GitHub
w3c/webauthn
-
3 issues opened.
-
Document the prfAlreadyHashed extension Android sends for hybrid PRF requests w3c/webauthn#2489, by @mimi89999.
-
Cannot validate the origin of a credential with multiple levels of framing w3c/webauthn#2488, by @micolous.
-
Wording around P1 on NFCCTAP_MSG w3c/webauthn#2484, by @My1.
-
-
1 issue closed.
-
Wording around P1 on NFCCTAP_MSG w3c/webauthn#2484.
-
-
4 issues received 9 new comments.
-
[PQ] Post Quantum Crypto and WebAuthn Transition for RP w3c/webauthn#2417 (1 comment by @Progdrasil)
-
Deprecate AuthenticatorAttachment in favor of PublicKeyCredentialHints. w3c/webauthn#2053 (1 comment by @Buer-Nahida)
-
3 pull requests opened.
-
[PQ] Make cmtgKeys extension output a list w3c/webauthn#2487, by @nsatragno.
-
Update Conditional UI without autofill explainer w3c/webauthn#2486, by @kenrb.
-
Conditional UI without autofill w3c/webauthn#2485, by @kenrb.
-
-
1 pull request merged.
-
Update Conditional UI without autofill explainer w3c/webauthn#2486.
-
-
4 pull requests received 7 new comments.
-
Add "Credential Manager Trust Group (CMTG) Key" extension w3c/webauthn#2377 (1 comment by @nsatragno)
Lifecycle
TR publications
-
1 document published.
-
Web Authentication: An API for accessing Public Key Credentials - Level 4 published as a First Public Working Draft. History of Web Authentication: An API for accessing Public Key Credentials - Level 4
-
Past meetings
Participants
-
4 participants joined.
-
Brent Zundel (Yubico) joined.
-
Michael Kohler (Interledger Foundation) joined.
-
Ioana Chiorean (Interledger Foundation) joined.
-
Sabine Schaller (Interledger Foundation) joined.
-
-
5 participants left.
-
Kaushik Satpathy (Yahoo Holdings Inc.) left.
-
Thanawat Kaewka (Yahoo Holdings Inc.) left.
-
Mert Coskuner (Yahoo Holdings Inc.) left.
-
Ronn George Jacob (Yahoo Holdings Inc.) left.
-
Melissa Sebastian (Entersekt) left.
-
-
18 organizations joined.
-
Mastercard Incorporated joined.
-
KDDI CORPORATION joined.
-
Capital One Discover Network joined.
-
1Password joined.
-
Microsoft Corporation joined.
-
Visa joined.
-
Yubico joined.
-
Entersekt joined.
-
Mozilla Foundation joined.
-
Netcetera joined.
-
IBM Corporation joined.
-
Bitwarden joined.
-
Google LLC joined.
-
Interledger Foundation joined.
-
OneSpan joined.
-
Cisco joined.
-
Meta joined.
-
Okta joined.
-
-
39 organizations left.
-
Social Web Foundation left.
-
Cybozu left.
-
Futurae Technologies AG left.
-
Capital One Discover Network left.
-
1Password left.
-
NCSC left.
-
PayPal left.
-
Jiangsu TPBlock Technology Co., Ltd. （江苏第三极区块链科技有限公司） left.
-
Netcetera left.
-
Mastercard Incorporated left.
-
Okta left.
-
Mattr Limited left.
-
Meta left.
-
360 left.
-
Samsung Electronics Co., Ltd. left.
-
Bitwarden left.
-
Apeleg Limited left.
-
Defense Information Systems Agency left.
-
KDDI CORPORATION left.
-
NTT, Inc. left.
-
American Express Company left.
-
Yahoo Holdings Inc. left.
-
National Institute of Standards and Technology (NIST) left.
-
LY Corporation left.
-
OneSpan left.
-
Rakuten Group, Inc. left.
-
Amazon left.
-
Visa left.
-
Google LLC left.
-
IBM Corporation left.
-
Alibaba Group left.
-
Apple Inc. left.
-
Entersekt left.
-
Spruce Systems, Inc. left.
-
Cisco left.
-
Microsoft Corporation left.
-
Mozilla Foundation left.
-
Ping Identity left.
-
Yubico left.
-
GitHub
w3c/webauthn
-
4 issues opened.
-
Targeting EUDI Wallet et. al. for payments w3c/webauthn#2480, by @cyberphone.
-
Add device binding to cross-device fallback URL extension w3c/webauthn#2478, by @iinuwa.
-
Credential Backup clarification (note about older authenticators) w3c/webauthn#2477, by @My1.
-
12 issues closed.
-
[Editorial] Truncation description inaccurate w3c/webauthn#1645.
-
Me w3c/webauthn#2035.
-
Sha w3c/webauthn#2036.
-
Merge changes made in L3-CR branch into main w3c/webauthn#2405.
-
Explainer for Level 4 w3c/webauthn#2297.
-
Clearly define the way how RP handles the extensions w3c/webauthn#1258.
-
export definitions? w3c/webauthn#1049.
-
Targeting EUDI Wallet et. al. for payments w3c/webauthn#2480.
-
Re-Open "confirmation" discussion (see PR#2020) w3c/webauthn#2352.
-
Call for editors for WebAuthn L4 w3c/webauthn#2406.
-
-
18 issues received 35 new comments.
-
Add a way for RPs to ensure registration of certain authenticator-supported UV methods w3c/webauthn#2482 (11 comments by @khurramhaneef-bit, @MasterKale, @micolous, @serianox, @ve7jtb)
-
Credential Backup clarification (note about older authenticators) w3c/webauthn#2477 (4 comments by @micolous, @My1)
-
Consider portable evidence manifests for attestation auditability w3c/webauthn#2436 (2 comments by @emlun, @timcappalli)
-
Targeting EUDI Wallet et. al. for payments w3c/webauthn#2480 (2 comments by @cyberphone, @timcappalli)
-
Add device binding to cross-device fallback URL extension w3c/webauthn#2478 (2 comments by @iinuwa, @timcappalli)
-
Hint to deprioritize credential providers that hold a credential in excludeCredentials w3c/webauthn#2458 (1 comment by @timcappalli)
-
double check whether the Secure Payment Confirmation effort has implications on the WebAuthn spec w3c/webauthn#1492 (1 comment by @timcappalli)
-
Mechanism for encoding *direction* metadata may need more work w3c/webauthn#1644 (1 comment by @MasterKale)
-
-
6 pull requests opened.
-
Update conditional UI without autofill explainer w3c/webauthn#2483, by @kenrb.
-
Update main for WebAuthn Level 4 w3c/webauthn#2481, by @simoneonofri.
-
Merge L3-REC into main w3c/webauthn#2479, by @emlun.
-
Update alg upgrade explainer w3c/webauthn#2476, by @nsatragno.
-
[PQ] Back up and restore overridden credentials w3c/webauthn#2475, by @nsatragno.
-
Update algorithm upgrades explainer w3c/webauthn#2474, by @nsatragno.
-
-
5 pull requests merged.
-
Update conditional UI without autofill explainer w3c/webauthn#2483.
-
Merge L3-REC into main w3c/webauthn#2479.
-
Remove files that haven't been touched in years w3c/webauthn#2463.
-
Update alg upgrade explainer w3c/webauthn#2476.
-
Update algorithm upgrades explainer w3c/webauthn#2474.
-
-
6 pull requests received 25 new comments.
-
Add "Credential Manager Trust Group (CMTG) Key" extension w3c/webauthn#2377 (9 comments by @emlun, @timcappalli)
-
Add Cross Device Fallback URL extension for hybrid transport authentication w3c/webauthn#2380 (5 comments by @harshlal028, @iinuwa, @MasterKale, @pascoej)
-
Lifecycle
-
1 charter extension.
-
Charter extended until 30 October 2026.
-
TR publications
-
1 document published.
Past meetings
Participants
-
1 participant joined.
-
Shubham Sharma (Amazon) joined.
-
-
1 participant left.
-
Andre Büttner (W3C Invited Experts) left.
-
GitHub
w3c/webauthn
-
10 issues opened.
-
[PQ] SHA-256 usage w3c/webauthn#2471, by @timcappalli.
-
Consider deprecating COSE algorithm identifier -7 in favour of -9. w3c/webauthn#2469, by @nsatragno.
-
Should a CTAP2 virtual authenticator support CTAP1/U2F? w3c/webauthn#2468, by @micolous.
-
Document risks of allowing multiple origins w3c/webauthn#2466, by @emlun.
-
Hints should not take precendence over transports in an authentication ceremony w3c/webauthn#2465, by @sbweeden.
-
Virtual authenticator add credential command should handle default parameters better w3c/webauthn#2464, by @nsatragno.
-
`pkOptions.pubKeyCredParams` default will be unsafe after Q-day w3c/webauthn#2462, by @nsatragno.
-
Cross-RP batch enrollment of a backup security key w3c/webauthn#2460, by @yubinhu.
-
4 issues closed.
-
[L3 REC] Transition Request Draft w3c/webauthn#2399.
-
Consider deprecating COSE algorithm identifier -7 in favour of -9. w3c/webauthn#2469.
-
`pkOptions.pubKeyCredParams` default will be unsafe after Q-day w3c/webauthn#2462.
-
Virtual authenticator should allow `counter` to always be `0` w3c/webauthn#2363.
-
-
1 issue reopened.
-
Support for WebDriver BiDi w3c/webauthn#2072, by @nsatragno.
-
-
13 issues received 35 new comments.
-
Document risks of allowing multiple origins w3c/webauthn#2466 (8 comments by @emlun, @FiloSottile, @Firstyear, @james-d-elliott)
-
[PQ] Add new batch attestation type for Merkle tree certificates w3c/webauthn#2456 (5 comments by @iinuwa, @timcappalli, @ve7jtb, @zacknewman)
-
`pkOptions.pubKeyCredParams` default will be unsafe after Q-day w3c/webauthn#2462 (3 comments by @MasterKale, @nsatragno, @ve7jtb)
-
Consider deprecating COSE algorithm identifier -7 in favour of -9. w3c/webauthn#2469 (2 comments by @emlun, @nsatragno)
-
[PQ] Default Algorithems for Authenticators perhaps need updating. w3c/webauthn#2448 (2 comments by @nsatragno, @ve7jtb)
-
Hints should not take precendence over transports in an authentication ceremony w3c/webauthn#2465 (1 comment by @sbweeden)
-
Virtual authenticator should allow `counter` to always be `0` w3c/webauthn#2363 (1 comment by @MasterKale)
-
Conditional creation incompatible with `uvInitialized` semantics in Chapter 7? w3c/webauthn#2295 (1 comment by @arianvp)
-
-
3 pull requests opened.
-
Add algorithm upgrade explainer w3c/webauthn#2473, by @nsatragno.
-
Fix indentation of step to invoke authenticatorMakeCredential w3c/webauthn#2470, by @emlun.
-
Remove files that haven't been touched in years w3c/webauthn#2463, by @MasterKale.
-
-
1 pull request merged.
-
Add algorithm upgrade explainer w3c/webauthn#2473.
-
-
6 pull requests received 66 new comments.
-
Add Cross Device Fallback URL extension for hybrid transport authentication w3c/webauthn#2380 (38 comments by @christiaanbrand, @harshlal028, @iinuwa, @kreichgauer, @timcappalli)
-
Add virtual authenticator support for CMTG keys w3c/webauthn#2445 (10 comments by @MasterKale, @nsatragno)
-
Add "Credential Manager Trust Group (CMTG) Key" extension w3c/webauthn#2377 (8 comments by @harshlal028)
-