Web Authentication Working Group - Activity in 2022
No matches.
Past meetings
-
1 meeting.
Participants
-
1 participant left.
-
Rodrigo Paiva (Google LLC) left.
-
GitHub
w3c/webauthn
-
4 issues opened.
-
Add "smart-card" to AuthenticatorTransport enum (WebKit) w3c/webauthn#1835, by @micolous.
-
Tech and business plan injection - a roadmap - The Key Smith story w3c/webauthn#1834, by @GregorGT.
-
WebAuthn Level 2 specification page error: ERR_TOO_MANY_REDIRECTS w3c/webauthn#1832, by @mirkop.
-
Support for FIDO passkey with HMAC-Secret extension w3c/webauthn#1830, by @Sebastian-Elfors-IDnow.
-
-
4 issues closed.
-
Tech and business plan injection - a roadmap - The Key Smith story w3c/webauthn#1834.
-
Clarity on challenge length w3c/webauthn#1803.
-
WebAuthn Level 2 specification page error: ERR_TOO_MANY_REDIRECTS w3c/webauthn#1832.
-
-
14 issues received 41 new comments.
-
Support for FIDO passkey with HMAC-Secret extension w3c/webauthn#1830 (10 comments by @agl, @emlun, @Firstyear, @FlxMgdnz, @irew, @Progdrasil, @Sebastian-Elfors-IDnow)
-
Provide a way for an RP to set an intention to offer more user friendly UX w3c/webauthn#1823 (4 comments by @dwaite, @emlun, @Firstyear, @nicksteele)
-
Variable reference issue in DPK processing rules w3c/webauthn#1817 (4 comments by @agl, @emlun, @nadalin, @selfissued)
-
Add "smart-card" to AuthenticatorTransport enum (WebKit) w3c/webauthn#1835 (3 comments by @pascoej, @ve7jtb)
-
Possibility to filter displayed authenticators by certified level w3c/webauthn#1816 (3 comments by @Firstyear, @JeanDim, @nicksteele)
-
Being able to access the same public key credentials across different domains w3c/webauthn#1827 (2 comments by @timcappalli, @vans163)
-
WebAuthn Level 2 specification page error: ERR_TOO_MANY_REDIRECTS w3c/webauthn#1832 (2 comments by @MasterKale, @mirkop)
-
WebAuthn available to Workers? aka "silent authentication" w3c/webauthn#199 (2 comments by @James-ZHANG, @ve7jtb)
-
Tech and business plan injection - a roadmap - The Key Smith story w3c/webauthn#1834 (1 comment by @emlun)
-
-
1 pull request opened.
-
Remove extra spaces w3c/webauthn#1833, by @pascoej.
-
-
1 pull request merged.
-
Remove extra spaces w3c/webauthn#1833.
-
-
2 pull requests received 6 new comments.
-
Use credential record abstraction in devicePubKey extension w3c/webauthn#1812 (4 comments by @timcappalli)
-
Allow for credential creation in a cross-origin iframe w3c/webauthn#1801 (2 comments by @rlin1, @stephenmcgruer)
-
Past meetings
-
2 meetings.
Participants
-
3 participants joined.
-
Tony England (Visa) joined.
-
Jason Cai (Amazon) joined.
-
Jaimin Bhatt (Amazon) joined.
-
GitHub
w3c/webauthn
-
7 issues opened.
-
Assertion signatures: raw or ASN.1 wrapped? w3c/webauthn#1829, by @dagnelies.
-
Waqarayesha616 w3c/webauthn#1828, by @Waqarahmed616.
-
Being able to access the same public key credentials across different domains w3c/webauthn#1827, by @enricobottazzi.
-
Obtain signature during Registration w3c/webauthn#1825, by @enricobottazzi.
-
HTML-only webauthn w3c/webauthn#1824, by @rustrust.
-
Provide a way for an RP to set an intention to offer more user friendly UX w3c/webauthn#1823, by @Kieun.
-
residentKey: "preferred-if-unlimited"? w3c/webauthn#1822, by @emlun.
-
-
8 issues closed.
-
Waqarayesha616 w3c/webauthn#1828.
-
Obtain signature during Registration w3c/webauthn#1825.
-
Requirements for security of MDC, DPK and attestation w3c/webauthn#1808.
-
Give flag attributes in [=credential record=] more descriptive names w3c/webauthn#1811.
-
HTML-only webauthn w3c/webauthn#1824.
-
Provide request deserialization, response serialization w3c/webauthn#1683.
-
-
1 issue reopened.
-
Possibility to filter displayed authenticators by certified level w3c/webauthn#1816, by @Firstyear.
-
-
16 issues received 88 new comments.
-
residentKey: "preferred-if-unlimited"? w3c/webauthn#1822 (35 comments by @emlun, @Firstyear, @Kieun, @My1, @sbweeden, @timcappalli, @ve7jtb)
-
Add a way to use webauthn without Javascript w3c/webauthn#1255 (11 comments by @emlun, @koteisaev, @pabs3, @rustrust, @septatrix)
-
Being able to access the same public key credentials across different domains w3c/webauthn#1827 (7 comments by @emlun, @enricobottazzi, @Firstyear, @pmlopes, @yackermann)
-
Possibility to filter displayed authenticators by certified level w3c/webauthn#1816 (6 comments by @emlun, @Firstyear, @JeanDim, @nicksteele)
-
Which "pubKeyCredParams" to use? w3c/webauthn#1757 (5 comments by @dagnelies, @Firstyear, @MasterKale, @WordlessEcho)
-
Possible experiences in a future WebAuthn w3c/webauthn#1637 (5 comments by @bbangert, @emlun, @timcappalli)
-
Variable reference issue in DPK processing rules w3c/webauthn#1817 (2 comments by @Kieun, @sbweeden)
-
Provide a way for an RP to set an intention to offer more user friendly UX w3c/webauthn#1823 (2 comments by @enricobottazzi, @timcappalli)
-
Provide request deserialization, response serialization w3c/webauthn#1683 (2 comments by @dwaite, @MasterKale)
-
Is there a way to store user secret key in the authenticator with/without an extension? w3c/webauthn#1818 (1 comment by @emlun)
-
-
2 pull requests opened.
-
Edit to remove redundant "the" w3c/webauthn#1826, by @egrim.
-
Fix now-single RFU bit still referred to as plural w3c/webauthn#1821, by @emlun.
-
-
4 pull requests merged.
-
Edit to remove redundant "the" w3c/webauthn#1826.
-
Give flag items in credential record more descriptive names w3c/webauthn#1813.
-
Fix now-single RFU bit still referred to as plural w3c/webauthn#1821.
-
Fix incorrectly described reference to attStmt formats registry w3c/webauthn#1814.
-
-
2 pull requests received 2 new comments.
-
Allow for credential creation in a cross-origin iframe w3c/webauthn#1801 (1 comment by @stephenmcgruer)
Past meetings
-
2 meetings.
Participants
-
6 participants joined.
-
Nicholas Tindle (Sonr) joined.
-
Ian Perez (Sonr) joined.
-
Brayden Cloud (Sonr) joined.
-
Inactive Inactive (Sonr) joined.
-
Prad Nukala (Sonr) joined.
-
Paul Knauer (Entersekt) joined.
-
-
1 organization joined.
-
Sonr joined.
-
GitHub
w3c/webauthn
-
5 issues opened.
-
"android-key" and "android-safetynet" are really basic attestation type support? w3c/webauthn#1819, by @Kieun.
-
Variable reference issue in DPK processing rules w3c/webauthn#1817, by @sbweeden.
-
Possibility to filter displayed authenticators by certified level w3c/webauthn#1816, by @JeanDim.
-
Give flag attributes in [=credential record=] more descriptive names w3c/webauthn#1811, by @emlun.
-
-
10 issues closed.
-
Device-bound key extension w3c/webauthn#1658.
-
DPK attestation may create possible side channel attack on the batch key. w3c/webauthn#1701.
-
Support Filtering by allow list in Conditional UI w3c/webauthn#1793.
-
Note to encourage storage of registered credential details w3c/webauthn#1556.
-
"privacy ca" term in images/fido-attestation-structures.svg w3c/webauthn#1421.
-
Addition of a network transport w3c/webauthn#1381.
-
Update name, displayname and icon for RP and user w3c/webauthn#1200.
-
Create GitHub issue templates w3c/webauthn#1777.
-
Bikeshed build failing w3c/webauthn#1802.
-
Incorrect use of `options` variable in `create()` and `get()` definitions w3c/webauthn#1752.
-
-
14 issues received 35 new comments.
-
Variable reference issue in DPK processing rules w3c/webauthn#1817 (7 comments by @agl, @emlun, @sbweeden)
-
Requiring user activation to call WebAuthn API w3c/webauthn#1293 (4 comments by @james-d-elliott, @MasterKale, @sbweeden)
-
How to know if a user has already registered a device? w3c/webauthn#1749 (3 comments by @dagnelies, @Firstyear, @timcappalli)
-
Unicode "tag" characters are deprecated for language tagging w3c/webauthn#1642 (3 comments by @aphillips, @r12a, @xorgy)
-
Possibility to filter displayed authenticators by certified level w3c/webauthn#1816 (3 comments by @Firstyear, @serianox)
-
Is there a way to store user secret key in the authenticator with/without an extension? w3c/webauthn#1818 (2 comments by @emlun, @timcappalli)
-
Note to encourage storage of registered credential details w3c/webauthn#1556 (2 comments by @emlun, @Firstyear)
-
-
4 pull requests opened.
-
Fix broken links to steps in RP ops from DPK extension w3c/webauthn#1815, by @emlun.
-
Fix incorrectly described reference to attStmt formats registry w3c/webauthn#1814, by @emlun.
-
Give flag items in credential record more descriptive names w3c/webauthn#1813, by @emlun.
-
Use credential record abstraction in devicePubKey extension w3c/webauthn#1812, by @emlun.
-
-
8 pull requests merged.
-
Fix broken links to steps in RP ops from DPK extension w3c/webauthn#1815.
-
device public key extension w3c/webauthn#1663.
-
Conditional request allowList credential filtering w3c/webauthn#1810.
-
Replace obsolete RFC8152 with RFC9052 and RFC9053 w3c/webauthn#1804.
-
Move state updates to last in RP verification steps w3c/webauthn#1807.
-
Fix dangling language in WebAuthn Extensions section w3c/webauthn#1768.
-
Fix broken cross-spec references w3c/webauthn#1796.
-
Fix incorrect use of options variable: rename to pkOptions w3c/webauthn#1805.
-
-
1 pull request closed.
-
7 pull requests received 33 new comments.
-
Conditional request allowList credential filtering w3c/webauthn#1810 (9 comments by @emlun, @Firstyear, @nsatragno)
-
Move state updates to last in RP verification steps w3c/webauthn#1807 (5 comments by @emlun, @MasterKale)
-
Give flag items in credential record more descriptive names w3c/webauthn#1813 (1 comment by @MasterKale)
-
Fix incorrect use of options variable: extract signal and mediation attributes first w3c/webauthn#1806 (1 comment by @emlun)
Past meetings
Participants
-
6 participants joined.
-
John Harney (Defense Information Systems Agency) joined.
-
Shoma Tanaka (KDDI CORPORATION) joined.
-
Kousuke Koiwai (KDDI CORPORATION) joined.
-
Koichi Moriyama (NTT, Inc.) joined.
-
Max Hata (NTT, Inc.) joined.
-
Juliana Cafik (Microsoft Corporation) joined.
-
-
3 organizations joined.
-
Defense Information Systems Agency joined.
-
KDDI CORPORATION joined.
-
NTT, Inc. joined.
-
GitHub
w3c/webauthn
-
12 issues opened.
-
hmacCreateSecret w3c/webauthn#1809, by @dontcallmedom.
-
Requirements for security of MDC, DPK and attestation w3c/webauthn#1808, by @keikoit.
-
Clarity on challenge length w3c/webauthn#1803, by @sbweeden.
-
Bikeshed build failing w3c/webauthn#1802, by @sbweeden.
-
Prescriptive behaviours for Autofill UI w3c/webauthn#1800, by @sbweeden.
-
Requirements for attestation for DPK w3c/webauthn#1799, by @keikoit.
-
Attestation for DPK(device-bound public key) w3c/webauthn#1798, by @keikoit.
-
Dependencies section is out of date and duplicates terms index w3c/webauthn#1797, by @emlun.
-
Enterprise attestaion is a bool in WebAuthn and an Int in CTAP2.1 w3c/webauthn#1795, by @ve7jtb.
-
Support Filtering by allow list in Conditional UI w3c/webauthn#1793, by @ChadKillingsworth.
-
Must assertions with attestation include attested credential data? w3c/webauthn#1792, by @emlun.
-
-
13 issues closed.
-
hmacCreateSecret w3c/webauthn#1809.
-
Requirements for attestation for DPK w3c/webauthn#1799.
-
Inconsistencies in backup state flags w3c/webauthn#1740.
-
Extend WebAuthn spec to support interoperability in WebExtensions w3c/webauthn#1766.
-
Must assertions with attestation include attested credential data? w3c/webauthn#1792.
-
Attestation for DPK(device-bound public key) w3c/webauthn#1798.
-
continuous assertion w3c/webauthn#1785.
-
Conditional Mediation feature discovery should really return a promise w3c/webauthn#1745.
-
-
1 issue reopened.
-
Requirements for security of MDC, DPK and attestation w3c/webauthn#1808, by @timcappalli.
-
-
23 issues received 68 new comments.
-
Support Filtering by allow list in Conditional UI w3c/webauthn#1793 (24 comments by @ChadKillingsworth, @christiaanbrand, @emlun, @Firstyear, @lgarron, @MasterKale, @nsatragno, @timcappalli, @ve7jtb)
-
Requirements for security of MDC, DPK and attestation w3c/webauthn#1808 (10 comments by @emlun, @Firstyear, @kkoiwai, @maxhata, @sbweeden, @timcappalli)
-
Must assertions with attestation include attested credential data? w3c/webauthn#1792 (3 comments by @emlun, @Firstyear)
-
Add a way to use webauthn without Javascript w3c/webauthn#1255 (2 comments by @apparentlymart, @pabs3)
-
Determining length of `attestedCredentialData` when authenticator extensions present. w3c/webauthn#1012 (2 comments by @emlun, @FrankZhangPA)
-
Support a "create or get [or replace]" credential re-association operation w3c/webauthn#1568 (2 comments by @kevvurs, @timcappalli)
-
Extend WebAuthn spec to support interoperability in WebExtensions w3c/webauthn#1766 (2 comments by @agl)
-
Platform authentication registration promotion when the user has authenticated with the external authenticator w3c/webauthn#1759 (1 comment by @agl)
-
Authenticator flag to indicate internal knowledge of rk (discoverable credential creation). w3c/webauthn#1761 (1 comment by @christiaanbrand)
-
Facility for an RP to indicate a change of displayName to a discoverable credential w3c/webauthn#1779 (1 comment by @nsatragno)
-
Add ability to query for feasibility of registering a credential that is backup eligible w3c/webauthn#1788 (1 comment by @sbweeden)
-
Enterprise attestaion is a bool in WebAuthn and an Int in CTAP2.1 w3c/webauthn#1795 (1 comment by @Firstyear)
-
Specify what happens when a WebAuthn request is issued while there is another one in progress w3c/webauthn#1790 (1 comment by @nsatragno)
-
Split RP ops "Registering a new credential" into one with and one without attestation w3c/webauthn#1710 (1 comment by @emlun)
-
-
7 pull requests opened.
-
Conditional request allowList credential filtering w3c/webauthn#1810, by @nsatragno.
-
Move state updates to last in RP verification steps w3c/webauthn#1807, by @emlun.
-
Fix incorrect use of options variable: extract signal and mediation attributes first w3c/webauthn#1806, by @emlun.
-
Fix incorrect use of options variable: rename to pkOptions w3c/webauthn#1805, by @emlun.
-
Replace obsolete RFC8152 with RFC9052 and RFC9053 w3c/webauthn#1804, by @emlun.
-
Allow for credential creation in a cross-origin iframe w3c/webauthn#1801, by @stephenmcgruer.
-
Fix broken cross-spec references w3c/webauthn#1796, by @emlun.
-
-
3 pull requests merged.
-
Extract Credential Record abstraction w3c/webauthn#1773.
-
Fix inconsistencies in backup state flags w3c/webauthn#1772.
-
Add "Code injection attacks" security consideration w3c/webauthn#1733.
-
-
5 pull requests received 71 new comments.
-
Allow for credential creation in a cross-origin iframe w3c/webauthn#1801 (2 comments by @stephenmcgruer)
Past meetings
-
2 meetings.
GitHub
w3c/webauthn
-
4 issues opened.
-
Enforce backup eligibility during assertion w3c/webauthn#1791, by @Firstyear.
-
Credential discovery is unclear w3c/webauthn#1789, by @bobknowscode.
-
-
1 issue closed.
-
Is it possible to integrate SQRL with webauthn? w3c/webauthn#1786.
-
-
7 issues received 24 new comments.
-
Enforce backup eligibility during assertion w3c/webauthn#1791 (6 comments by @agl, @emlun, @Firstyear, @MasterKale, @timcappalli)
-
Credential Creation Options are inconsistent to Request w3c/webauthn#1716 (5 comments by @emlun, @Firstyear, @rohansroy, @sbweeden)
-
Add ability to query for feasibility of registering a credential that is backup eligible w3c/webauthn#1788 (4 comments by @Firstyear, @MasterKale, @timcappalli)
-
Facility for an RP to indicate a change of displayName to a discoverable credential w3c/webauthn#1779 (2 comments by @emlun, @Firstyear)
-
-
1 pull request opened.
-
Fix merge conflicts in PR #1658 w3c/webauthn#1787, by @emlun.
-
-
2 pull requests merged.
-
Namespace authData dfns under authData/ and flags under authData/flags/ w3c/webauthn#1771.
-
Fix merge conflicts in PR #1658 w3c/webauthn#1787.
-
-
5 pull requests received 43 new comments.
-
Namespace authData dfns under authData/ and flags under authData/flags/ w3c/webauthn#1771 (1 comment by @emlun)
Past meetings
-
2 meetings.
Participants
-
2 participants joined.
-
Arlen Yan (Keeper Security Inc.) joined.
-
Craig Lurey (Keeper Security Inc.) joined.
-
-
1 organization joined.
-
Keeper Security Inc. joined.
-
GitHub
w3c/webauthn
-
15 issues opened.
-
Is it possible to integrate SQRL with webauthn? w3c/webauthn#1786, by @ghost.
-
continuous assertion w3c/webauthn#1785, by @devsnek.
-
Add SM2 Digital Signature Algorithm Support w3c/webauthn#1783, by @thedreamwork.
-
Incorrect heading level on `prf` extension w3c/webauthn#1781, by @MasterKale.
-
Facility for an RP to indicate a change of displayName to a discoverable credential w3c/webauthn#1779, by @Firstyear.
-
Create GitHub issue templates w3c/webauthn#1777, by @timcappalli.
-
BE/BS flags missing from authenticator data diagrams w3c/webauthn#1775, by @emlun.
-
Ambiguous autolink references w3c/webauthn#1769, by @emlun.
-
Unofficial draft w3c/webauthn#1767, by @ghost.
-
Extend WebAuthn spec to support interoperability in WebExtensions w3c/webauthn#1766, by @Mikescops.
-
How to deal with discoverable credentials? w3c/webauthn#1764, by @dagnelies.
-
Why not email/username as user.id / user handle? w3c/webauthn#1763, by @dagnelies.
-
Seperate defined extensions by client and authenticator extensions. w3c/webauthn#1760, by @Firstyear.
-
-
11 issues closed.
-
BE/BS flags missing from authenticator data diagrams w3c/webauthn#1775.
-
Seperate defined extensions by client and authenticator extensions. w3c/webauthn#1760.
-
Incorrect heading level on `prf` extension w3c/webauthn#1781.
-
Add SM2 Digital Signature Algorithm Support w3c/webauthn#1783.
-
Unofficial draft w3c/webauthn#1767.
-
Ambiguous autolink references w3c/webauthn#1769.
-
Move PRF Extension into its own specification w3c/webauthn#1462.
-
use "public key credential source" consistently w3c/webauthn#1707.
-
Why not email/username as user.id / user handle? w3c/webauthn#1763.
-
How to deal with discoverable credentials? w3c/webauthn#1764.
-
2 issues reopened.
-
Seperate defined extensions by client and authenticator extensions. w3c/webauthn#1760, by @emlun.
-
Missing Test Vectors w3c/webauthn#1633, by @nicksteele.
-
-
20 issues received 85 new comments.
-
Authenticator flag to indicate internal knowledge of rk (discoverable credential creation). w3c/webauthn#1761 (31 comments by @dwaite, @emlun, @Firstyear, @Kieun, @MasterKale, @ndpar, @nuno0529, @sbweeden, @serianox, @timcappalli, @ve7jtb)
-
How to deal with discoverable credentials? w3c/webauthn#1764 (10 comments by @dagnelies, @emlun, @Firstyear, @ndpar, @timcappalli)
-
Why not email/username as user.id / user handle? w3c/webauthn#1763 (8 comments by @dagnelies, @emlun, @Firstyear)
-
`uvm` extension is missing authenticator extension input and output WebIDL definitions w3c/webauthn#1782 (5 comments by @Firstyear, @MasterKale)
-
Seperate defined extensions by client and authenticator extensions. w3c/webauthn#1760 (4 comments by @emlun, @Firstyear, @Kieun)
-
Facility for an RP to indicate a change of displayName to a discoverable credential w3c/webauthn#1779 (3 comments by @emlun, @Firstyear, @nuno0529)
-
Add SM2 Digital Signature Algorithm Support w3c/webauthn#1783 (3 comments by @emlun, @Firstyear, @thedreamwork)
-
Split the standard by focus driven use cases. w3c/webauthn#1751 (3 comments by @Firstyear, @MasterKale)
-
Platform authentication registration promotion when the user has authenticated with the external authenticator w3c/webauthn#1759 (3 comments by @emlun, @ghost)
-
How to declare that a registration only awaits for a Security Key? w3c/webauthn#1750 (1 comment by @nicksteele)
-
Should enterprise attestation support be flagged explicitly? w3c/webauthn#1742 (1 comment by @ve7jtb)
-
User verification policy leads to ambiguous usage situations. w3c/webauthn#1510 (1 comment by @Firstyear)
-
-
12 pull requests opened.
-
Fix heading level for prf extension w3c/webauthn#1784, by @emlun.
-
Shortened editorial change issue template w3c/webauthn#1780, by @timcappalli.
-
first version of issue templates w3c/webauthn#1778, by @timcappalli.
-
Add BE/BS flags to diagrams, and fix alignments and line widths w3c/webauthn#1776, by @emlun.
-
Improve guidance around using UV w3c/webauthn#1774, by @emlun.
-
Extract Credential Record abstraction w3c/webauthn#1773, by @emlun.
-
Fix inconsistencies in backup state flags w3c/webauthn#1772, by @emlun.
-
Namespace authData dfns under authData/ and flags under authData/flags/ w3c/webauthn#1771, by @emlun.
-
Disambiguate autolink references w3c/webauthn#1770, by @emlun.
-
Fix dangling language in WebAuthn Extensions section w3c/webauthn#1768, by @emlun.
-
Clarify why PII is not allowed in user handle w3c/webauthn#1765, by @emlun.
-
Sections for client extensions and authenticator extensions w3c/webauthn#1762, by @Firstyear.
-
-
10 pull requests merged.
-
Add "hybrid" as a transport. w3c/webauthn#1755.
-
Add BE/BS flags to diagrams, and fix alignments and line widths w3c/webauthn#1776.
-
Fix heading level for prf extension w3c/webauthn#1784.
-
Shortened editorial change issue template w3c/webauthn#1780.
-
first version of issue templates w3c/webauthn#1778.
-
Sections for client extensions and authenticator extensions w3c/webauthn#1762.
-
Disambiguate autolink references w3c/webauthn#1770.
-
Clarify why PII is not allowed in user handle w3c/webauthn#1765.
-
Re-add the PRF extension. w3c/webauthn#1732.
-
Fix some editorial issues w3c/webauthn#1746.
-
-
1 pull request closed.
-
DRAFT: Backup eligibility parameter during registration w3c/webauthn#1744.
-
-
11 pull requests received 117 new comments.
-
device public key extension w3c/webauthn#1663 (74 comments by @agl, @emlun, @Firstyear, @MasterKale, @rlin1, @sbweeden, @ts-ron)
-
Improve guidance around using UV w3c/webauthn#1774 (14 comments by @emlun, @Firstyear, @timcappalli)
-
Sections for client extensions and authenticator extensions w3c/webauthn#1762 (13 comments by @emlun, @Firstyear)
-
Extract Credential Record abstraction w3c/webauthn#1773 (4 comments by @emlun, @Firstyear, @timcappalli)
-
Fix #1285 - Remove icons from PublicKeyCredentialEntity w3c/webauthn#1337 (2 comments by @dwaite, @jonesEric)
-
Namespace authData dfns under authData/ and flags under authData/flags/ w3c/webauthn#1771 (1 comment by @emlun)
-
Past meetings
Participants
-
4 participants joined.
-
Sue Koomen (American Express Company) joined.
-
Yuriy Ackermann (W3C Invited Experts) joined.
-
Ronn George Jacob (Yahoo Holdings Inc.) joined.
-
Ketan Mehta (National Institute of Standards and Technology (NIST)) joined.
-
-
3 organizations joined.
-
American Express Company joined.
-
Yahoo Holdings Inc. joined.
-
National Institute of Standards and Technology (NIST) joined.
-
GitHub
w3c/webauthn
-
15 issues opened.
-
Which "pubKeyCredParams" to use? w3c/webauthn#1757, by @dagnelies.
-
Incorrect use of `options` variable in `create()` and `get()` definitions w3c/webauthn#1752, by @emlun.
-
Split the standard by focus driven use cases. w3c/webauthn#1751, by @Firstyear.
-
How to declare that a registration only awaits for a Security Key? w3c/webauthn#1750, by @justnotherdev.
-
How to know if a user has already registered a device? w3c/webauthn#1749, by @dagnelies.
-
Better specify what an unknown type credential descriptor being ignored means w3c/webauthn#1748, by @nsatragno.
-
Use aPAKE/OPAQUE for FIDO multi-device credentials (PassKey) w3c/webauthn#1747, by @Sebastian-Elfors-IDnow.
-
Conditional Mediation feature discovery should really return a promise w3c/webauthn#1745, by @nsatragno.
-
Should enterprise attestation support be flagged explicitly? w3c/webauthn#1742, by @nsatragno.
-
Attestation on Get Assertion w3c/webauthn#1741, by @timcappalli.
-
Inconsistencies in backup state flags w3c/webauthn#1740, by @emlun.
-
Discussing mechanisms for enterprise RP's to enforce bound properties of credentials w3c/webauthn#1739, by @MasterKale.
-
Reconsider having unknown "enum" values being ignored w3c/webauthn#1738, by @nsatragno.
-
11 issues closed.
-
Add support for non-modal UI w3c/webauthn#1545.
-
How to know if a user has already registered a device? w3c/webauthn#1749.
-
Reconsider having unknown "enum" values being ignored w3c/webauthn#1738.
-
Advice on language to use? w3c/webauthn#1708.
-
Backup state of credentials w3c/webauthn#1692.
-
Drop generic client extension processing? w3c/webauthn#1730.
-
Credential Creation Options are inconsistent to Request w3c/webauthn#1716.
-
Why not make things simple? w3c/webauthn#1709.
-
Process to report non-compliant credentials w3c/webauthn#1713.
-
caBLE for Payments w3c/webauthn#1681.
-
-
1 issue reopened.
-
User verification policy leads to ambiguous usage situations. w3c/webauthn#1510, by @emlun.
-
-
23 issues received 131 new comments.
-
Discussing mechanisms for enterprise RP's to enforce bound properties of credentials w3c/webauthn#1739 (24 comments by @dwaite, @emlun, @Firstyear, @MasterKale, @rlin1, @sbweeden, @timcappalli)
-
Clarify how a user can authenticate from multiple devices w3c/webauthn#151 (19 comments by @daniel-nagy, @emlun, @Firstyear, @FlxMgdnz, @james-d-elliott, @Kieun, @lkj4, @mamartins, @ndpar, @timcappalli)
-
Should an RP be able to provide finer grained authenticator filtering in attestation options? w3c/webauthn#1688 (12 comments by @ChadKillingsworth, @Firstyear, @james-d-elliott, @sbweeden)
-
How to know if a user has already registered a device? w3c/webauthn#1749 (11 comments by @agl, @dagnelies, @emlun, @ndpar, @timcappalli)
-
Which "pubKeyCredParams" to use? w3c/webauthn#1757 (10 comments by @cyberphone, @dagnelies, @emlun, @Firstyear, @MasterKale, @nuno0529, @timcappalli)
-
Platform authentication registration promotion when the user has authenticated with the external authenticator w3c/webauthn#1759 (10 comments by @agl, @emlun, @Firstyear, @Kieun)
-
How to declare that a registration only awaits for a Security Key? w3c/webauthn#1750 (5 comments by @emlun, @Firstyear, @justnotherdev, @timcappalli)
-
User verification policy leads to ambiguous usage situations. w3c/webauthn#1510 (5 comments by @emlun, @Firstyear)
-
Inconsistencies in backup state flags w3c/webauthn#1740 (5 comments by @emlun, @Firstyear, @timcappalli)
-
Reconsider having unknown "enum" values being ignored w3c/webauthn#1738 (5 comments by @nsatragno, @selfissued, @ve7jtb)
-
Credential Creation Options are inconsistent to Request w3c/webauthn#1716 (4 comments by @emlun, @Firstyear)
-
Split the standard by focus driven use cases. w3c/webauthn#1751 (3 comments by @dagnelies, @Firstyear, @MasterKale)
-
Better specify what an unknown type credential descriptor being ignored means w3c/webauthn#1748 (3 comments by @emlun, @Firstyear, @nsatragno)
-
Use aPAKE/OPAQUE for FIDO multi-device credentials (PassKey) w3c/webauthn#1747 (2 comments by @Sebastian-Elfors-IDnow, @timcappalli)
-
Spec abstract is out of date on the eve of multi-device credentials and cross-device auth w3c/webauthn#1743 (1 comment by @dagnelies)
-
-
6 pull requests opened.
-
Add "hybrid" as a transport. w3c/webauthn#1755, by @agl.
-
Introduce unsigned extension outputs in DPK PR w3c/webauthn#1754, by @arnar.
-
Introduce unsigned extension outputs in DPK PR w3c/webauthn#1753, by @arnar.
-
Fix some editorial issues w3c/webauthn#1746, by @emlun.
-
DRAFT: Backup eligibility parameter during registration w3c/webauthn#1744, by @emlun.
-
Remove Generic Passthrough w3c/webauthn#1737, by @nicksteele.
-
-
6 pull requests merged.
-
non-modal "conditionally mediated" UI w3c/webauthn#1576.
-
New PublicKeyCredential methods for JSON (de)serialization w3c/webauthn#1703.
-
Introduce unsigned extension outputs in DPK PR w3c/webauthn#1754.
-
Mention constant-zero case in §6.1.1 Signature Counter Considerations w3c/webauthn#1736.
-
backup states in authenticator data w3c/webauthn#1695.
-
Remove Generic Passthrough w3c/webauthn#1737.
-
-
2 pull requests closed.
-
Introduce unsigned extension outputs in DPK PR w3c/webauthn#1753.
-
Refer to options for the user verification check w3c/webauthn#1718.
-
-
11 pull requests received 92 new comments.
-
New PublicKeyCredential methods for JSON (de)serialization w3c/webauthn#1703 (29 comments by @dagnelies, @dwaite, @emlun, @Firstyear, @kreichgauer, @MasterKale)
-
non-modal "conditionally mediated" UI w3c/webauthn#1576 (28 comments by @agl, @emlun, @nsatragno, @wseltzer)
-
Refer to options for the user verification check w3c/webauthn#1718 (7 comments by @emlun, @Firstyear, @infinisil)
-
DRAFT: Backup eligibility parameter during registration w3c/webauthn#1744 (7 comments by @emlun, @Firstyear, @sbweeden, @timcappalli)
-
Add "Code injection attacks" security consideration w3c/webauthn#1733 (6 comments by @agl, @emlun, @ve7jtb)
-
Past meetings
-
2 meetings.
Participants
-
5 participants joined.
-
Hidehito Gomi (LY Corporation) joined.
-
Chris Anderson (Cisco) joined.
-
Matthew Lourie (OneSpan) joined.
-
Andy Peterson (Cisco) joined.
-
Rayissa Armata (IDnow GmbH) joined.
-
-
40 participants left.
-
Julien Rossi (CANTON CONSULTING) left.
-
werner bruinings (American Express Company) left.
-
Sophie Rainford (American Express Company) left.
-
Michel Foucault (CANTON CONSULTING) left.
-
Mohammad Mikal Bin Amrul Halim Gan (SoftBank Corp.) left.
-
Lu Zheng (SoftBank Corp.) left.
-
Jongho Shin (LINE Corporation) left.
-
Charles Hubain (LINE Corporation) left.
-
Merwan Rodriguez (The Washington Post) left.
-
Koichi Moriyama (NTT, Inc.) left.
-
Max Hata (NTT, Inc.) left.
-
Hidehito Gomi (LY Corporation) left.
-
Pranjal Jumde (Brave Software Inc.) left.
-
RAE HAYWARD (W3C Invited Experts) left.
-
Nathan George (Sovrin Foundation) left.
-
Kenneth Ebert (Sovrin Foundation) left.
-
Jean-Yves ROSSI (CANTON CONSULTING) left.
-
Yuriy Ackermann (W3C Invited Experts) left.
-
Elias Balafoutis (Wiley) left.
-
Junya Yoshida (SoftBank Corp.) left.
-
Naomi Yoshizawa (W3C) left.
-
Lu Alex (Tencent) left.
-
Xuan Ye (Tencent) left.
-
Anne WANG (Tencent) left.
-
Chris Pyrke-Moran (LSEG) left.
-
Ketan Mehta (National Institute of Standards and Technology (NIST)) left.
-
Janet LaFrence (Federal Reserve Bank of Minneapolis) left.
-
Paul Grassi (National Institute of Standards and Technology (NIST)) left.
-
Sangrae Cho (Electronics and Telecommunications Research Institute (ETRI)) left.
-
Adam Waid (Federal Reserve Bank of Minneapolis) left.
-
Pieralberto Deganello (Federal Reserve Bank of Minneapolis) left.
-
Ranjit Narjala (Intel Corporation) left.
-
vani yalapalli (Intel Corporation) left.
-
Rahuldeva Ghosh (Intel Corporation) left.
-
Natasha Rooney (W3C Invited Experts) left.
-
Philippe Le Hegaret (W3C) left.
-
Shougo Matsuda (SoftBank Corp.) left.
-
Rayissa Armata (IDnow GmbH) left.
-
David Singer (Apple Inc.) left.
-
Simon Rodway (Entersekt) left.
-
-
14 organizations joined.
-
LY Corporation joined.
-
OneSpan joined.
-
Rakuten Group, Inc. joined.
-
Amazon joined.
-
Cloudflare joined.
-
Visa joined.
-
Google LLC joined.
-
IDnow GmbH joined.
-
IBM Corporation joined.
-
Alibaba Group joined.
-
Apple Inc. joined.
-
Discover Financial Services LLC joined.
-
Entersekt joined.
-
VE3 joined.
-
GitHub
w3c/webauthn
-
5 issues opened.
-
Provide passwordless example, or update 1.3.2. to be a passwordless example w3c/webauthn#1735, by @GregBrimble.
-
§6.1.1. Signature Counter Considerations does not explicitly mention constant-zero case w3c/webauthn#1734, by @emlun.
-
Drop generic client extension processing? w3c/webauthn#1730, by @emlun.
-
Authentication through only what you are w3c/webauthn#1728, by @mfulton26.
-
-
4 issues closed.
-
Unclear/underspecified signature formats w3c/webauthn#1721.
-
Can userHandle be an empty string? w3c/webauthn#1722.
-
Fix the "aborted flag" reference w3c/webauthn#1682.
-
Authentication through only what you are w3c/webauthn#1728.
-
-
9 issues received 37 new comments.
-
Authentication through only what you are w3c/webauthn#1728 (10 comments by @emlun, @Firstyear, @Kieun, @mfulton26, @nicksteele, @sbweeden)
-
§6.1.1. Signature Counter Considerations does not explicitly mention constant-zero case w3c/webauthn#1734 (8 comments by @cyberphone, @emlun, @Firstyear, @MasterKale)
-
Missing specification on rpId validations when calling credentials.get() from a different origin w3c/webauthn#1731 (5 comments by @emlun, @Firstyear)
-
Drop generic client extension processing? w3c/webauthn#1730 (5 comments by @Firstyear, @MasterKale, @nicksteele, @sbweeden)
-
Provide passwordless example, or update 1.3.2. to be a passwordless example w3c/webauthn#1735 (1 comment by @timcappalli)
-
-
3 pull requests opened.
-
Mention constant-zero case in §6.1.1 Signature Counter Considerations w3c/webauthn#1736, by @emlun.
-
Add "Code injection attacks" security consideration w3c/webauthn#1733, by @emlun.
-
Re-add the PRF extension. w3c/webauthn#1732, by @agl.
-
-
2 pull requests merged.
-
Updates based on DOM's abort reason w3c/webauthn#1706.
-
Make Jeff Hodges a former editor. w3c/webauthn#1724.
-
-
9 pull requests received 35 new comments.
-
device public key extension w3c/webauthn#1663 (12 comments by @agl, @jovasco, @mpeng-okta, @timcappalli, @w3cbot, @wseltzer)
-
Updates based on DOM's abort reason w3c/webauthn#1706 (3 comments by @emlun, @nidhijaju, @nsatragno)
-
Refer to options for the user verification check w3c/webauthn#1718 (3 comments by @agl, @Firstyear, @infinisil)
-
Mention constant-zero case in §6.1.1 Signature Counter Considerations w3c/webauthn#1736 (1 comment by @yackermann)
-
Lifecycle
Past meetings
-
2 meetings.
Participants
-
3 participants joined.
-
Oliver Terbu (Mattr Limited) joined.
-
Nicholas Steele (1Password) joined.
-
Christopher Harrell (Yubico) joined.
-
-
3 participants left.
-
Jake Payton (Cisco) left.
-
Jeremy Erickson (Cisco) left.
-
Nicholas Steele (1Password) left.
-
-
6 organizations joined.
-
Spruce Systems, Inc. joined.
-
Cisco joined.
-
Microsoft Corporation joined.
-
Mozilla Foundation joined.
-
Ping Identity joined.
-
Yubico joined.
-
-
40 organizations left.
-
IDnow GmbH left.
-
Loongson Technology Corporation Limited left.
-
Cloudflare left.
-
VE3 left.
-
American Express Company left.
-
LINE Corporation left.
-
Rakuten Group, Inc. left.
-
Huawei left.
-
The Washington Post left.
-
Entersekt left.
-
Cisco left.
-
NTT, Inc. left.
-
LY Corporation left.
-
Discover Financial Services LLC left.
-
Amazon left.
-
Brave Software Inc. left.
-
Ping Identity left.
-
Sovrin Foundation left.
-
Visa left.
-
Consensys left.
-
Apple Inc. left.
-
Wiley left.
-
Airbnb Inc left.
-
SoftBank Corp. left.
-
INCA Internet Co.,Ltd. left.
-
IBM Corporation left.
-
Tencent left.
-
National Institute of Standards and Technology (NIST) left.
-
Electronics and Telecommunications Research Institute (ETRI) left.
-
LSEG left.
-
Alibaba Group left.
-
CANTON CONSULTING left.
-
Microsoft Corporation left.
-
HM Government left.
-
Federal Reserve Bank of Minneapolis left.
-
Yubico left.
-
Intel Corporation left.
-
Google LLC left.
-
Mozilla Foundation left.
-
OneSpan left.
-
GitHub
w3c/webauthn
-
6 issues opened.
-
Clarify the valid values for user handle in the Authentication Assertion w3c/webauthn#1723, by @lykahb.
-
Can userHandle be an empty string? w3c/webauthn#1722, by @infinisil.
-
Unclear/underspecified signature formats w3c/webauthn#1721, by @infinisil.
-
Update top level use cases to account for multi-device credentials w3c/webauthn#1720, by @timcappalli.
-
Public Key Credential Source and Extensions w3c/webauthn#1719, by @timcappalli.
-
Credential Creation Options are inconsistent to Request w3c/webauthn#1716, by @Firstyear.
-
-
4 issues closed.
-
Clarify the valid values for user handle in the Authentication Assertion w3c/webauthn#1723.
-
Updating IANA WebAuthn Registries for Level 2 w3c/webauthn#1694.
-
Clarification needed regarding meaning of "user verification is required" w3c/webauthn#1699.
-
Provide an explicit way to opt out of multi-device syncing/backups w3c/webauthn#1714.
-
-
10 issues received 34 new comments.
-
Credential Creation Options are inconsistent to Request w3c/webauthn#1716 (12 comments by @agl, @emlun, @Firstyear, @MasterKale, @ve7jtb)
-
Provide an explicit way to opt out of multi-device syncing/backups w3c/webauthn#1714 (8 comments by @dwaite, @emlun, @Firstyear, @timcappalli, @ve7jtb)
-
Update top level use cases to account for multi-device credentials w3c/webauthn#1720 (5 comments by @Firstyear, @timcappalli)
-
Clarify the valid values for user handle in the Authentication Assertion w3c/webauthn#1723 (1 comment by @lykahb)
-
Clarification needed regarding meaning of "user verification is required" w3c/webauthn#1699 (1 comment by @infinisil)
-
-
3 pull requests opened.
-
Make Jeff Hodges a former editor. w3c/webauthn#1724, by @jyasskin.
-
Refer to options for the user verification check w3c/webauthn#1718, by @infinisil.
-
Add explainer for remote desktop support w3c/webauthn#1717, by @kreichgauer.
-
-
1 pull request merged.
-
Change UV check step from passive to active voice w3c/webauthn#1704.
-
-
1 pull request closed.
-
Add explainer for remote desktop support w3c/webauthn#1717.
-
-
6 pull requests received 90 new comments.
-
backup states in authenticator data w3c/webauthn#1695 (44 comments by @agl, @emlun, @Firstyear, @Kieun, @MasterKale, @serianox, @timcappalli, @ve7jtb)
-
New PublicKeyCredential methods for JSON (de)serialization w3c/webauthn#1703 (27 comments by @dwaite, @emlun, @Firstyear, @kreichgauer, @MasterKale, @sbweeden)
-
Change UV check step from passive to active voice w3c/webauthn#1704 (3 comments by @infinisil, @sbweeden)
-
Past meetings
-
2 meetings.
Participants
-
3 participants joined.
-
Jorge Vargas (Discover Financial Services LLC) joined.
-
Martin Kreichgauer (Google LLC) joined.
-
Sebastian Elfors (IDnow GmbH) joined.
-
-
2 participants left.
-
Jeff Hodges (Google LLC) left.
-
Tao Mu (Loongson Technology Corporation Limited) left.
-
-
1 organization joined.
-
IDnow GmbH joined.
-
GitHub
w3c/webauthn
-
10 issues opened.
-
getClientExtensionResults returns nil in Safari 15.4 w3c/webauthn#1715, by @andreydanil.
-
Provide an explicit way to opt out of multi-device syncing/backups w3c/webauthn#1714, by @lxgr.
-
Process to report non-compliant credentials w3c/webauthn#1713, by @Firstyear.
-
getTransports() should return string instead of Array of string's w3c/webauthn#1712, by @raashidanwar.
-
Split RP ops "Registering a new credential" into one with and one without attestation w3c/webauthn#1710, by @emlun.
-
Why not make things simple? w3c/webauthn#1709, by @dagnelies.
-
Advice on language to use? w3c/webauthn#1708, by @ghost.
-
use "public key credential source" consistently w3c/webauthn#1707, by @equalsJeffH.
-
Switch to permissive copyright license? w3c/webauthn#1705, by @wseltzer.
-
-
2 issues closed.
-
getClientExtensionResults returns nil in Safari 15.4 w3c/webauthn#1715.
-
getTransports() should return string instead of Array of string's w3c/webauthn#1712.
-
-
13 issues received 64 new comments.
-
Provide an explicit way to opt out of multi-device syncing/backups w3c/webauthn#1714 (19 comments by @emlun, @lxgr, @serianox, @timcappalli, @ve7jtb)
-
Support `discoverableCredential` field in the API. w3c/webauthn#1565 (9 comments by @bathos, @emlun, @Firstyear, @lgarron, @MasterKale, @serianox)
-
Why not make things simple? w3c/webauthn#1709 (8 comments by @dagnelies, @emlun, @Firstyear, @yackermann)
-
Advice on language to use? w3c/webauthn#1708 (8 comments by @arshadnoor, @cyberphone, @Firstyear, @ghost, @MasterKale, @timcappalli)
-
Split RP ops "Registering a new credential" into one with and one without attestation w3c/webauthn#1710 (6 comments by @dagnelies, @emlun, @MasterKale)
-
Process to report non-compliant credentials w3c/webauthn#1713 (3 comments by @akshayku, @Firstyear, @ve7jtb)
-
Cross origin authentication without iframes (accommodating SPC in WebAuthn) w3c/webauthn#1667 (3 comments by @stephenmcgruer, @ve7jtb)
-
getClientExtensionResults returns nil in Safari 15.4 w3c/webauthn#1715 (2 comments by @andreydanil, @timcappalli)
-
getTransports() should return string instead of Array of string's w3c/webauthn#1712 (2 comments by @emlun)
-
RP operations: some extension processing may assume that the encompassing signature is valid w3c/webauthn#1711 (1 comment by @emlun)
-
-
1 pull request opened.
-
Updates based on DOM's abort reason w3c/webauthn#1706, by @nidhijaju.
-
-
7 pull requests received 99 new comments.
-
backup states in authenticator data w3c/webauthn#1695 (41 comments by @emlun, @equalsJeffH, @Firstyear, @timcappalli)
-
New PublicKeyCredential methods for JSON (de)serialization w3c/webauthn#1703 (24 comments by @dwaite, @emlun, @Firstyear, @kreichgauer, @lgarron, @MasterKale, @pmlopes)
-
Updates based on DOM's abort reason w3c/webauthn#1706 (15 comments by @annevk, @equalsJeffH, @nidhijaju, @nsatragno)
-
non-modal "conditionally mediated" UI w3c/webauthn#1576 (6 comments by @dwaite, @equalsJeffH, @MasterKale)
-
Change UV check step from passive to active voice w3c/webauthn#1704 (2 comments by @infinisil, @sbweeden)
-
Add registration/authentication extensions for cloud-assisted BLE w3c/webauthn#909 (1 comment by @haishengwu-okta)
-
Past meetings
-
2 meetings.
Participants
-
3 participants joined.
-
Tao Mu (Loongson Technology Corporation Limited) joined.
-
Carey Ferro (Discover Financial Services LLC) joined.
-
Juan Deng (Alibaba Group) joined.
-
-
1 participant left.
-
Michel Weksler (Airbnb Inc) left.
-
-
1 organization joined.
-
Loongson Technology Corporation Limited joined.
-
GitHub
w3c/webauthn
-
7 issues opened.
-
Can PublicKeyCredentialUserEntity.id be null? w3c/webauthn#1702, by @pascoej.
-
DPK attestation may create possible side channel attack on the batch key. w3c/webauthn#1701, by @ve7jtb.
-
Clarification needed regarding meaning of "user verification is required" w3c/webauthn#1699, by @infinisil.
-
How can we trust authenticator data flags in fmt:none response from `.create()`? w3c/webauthn#1698, by @MasterKale.
-
Platform Errors for attestations. w3c/webauthn#1697, by @ve7jtb.
-
FIDO credential decommissioning w3c/webauthn#1696, by @jdenghifive.
-
Updating IANA WebAuthn Registries for Level 2 w3c/webauthn#1694, by @infinisil.
-
-
2 issues closed.
-
Can PublicKeyCredentialUserEntity.id be null? w3c/webauthn#1702.
-
-
13 issues received 33 new comments.
-
Updating IANA WebAuthn Registries for Level 2 w3c/webauthn#1694 (4 comments by @equalsJeffH, @selfissued)
-
Provide request deserialization, response serialization w3c/webauthn#1683 (4 comments by @dagnelies, @dwaite)
-
How can we trust authenticator data flags in fmt:none response from `.create()`? w3c/webauthn#1698 (4 comments by @emlun, @Firstyear, @MasterKale)
-
Clarification needed regarding meaning of "user verification is required" w3c/webauthn#1699 (3 comments by @emlun, @equalsJeffH)
-
Should an RP be able to provide finer grained authenticator filtering in attestation options? w3c/webauthn#1688 (3 comments by @equalsJeffH, @Firstyear, @sbweeden)
-
Clarify how a user can authenticate from multiple devices w3c/webauthn#151 (2 comments by @David-Chadwick, @Lonli-Lokli)
-
DPK attestation may create possible side channel attack on the batch key. w3c/webauthn#1701 (1 comment by @equalsJeffH)
-
-
3 pull requests opened.
-
Change UV check step from passive to active voice w3c/webauthn#1704, by @emlun.
-
New PublicKeyCredential methods for JSON (de)serialization w3c/webauthn#1703, by @MasterKale.
-
backup states in authenticator data w3c/webauthn#1695, by @timcappalli.
-
-
5 pull requests received 31 new comments.
-
device public key extension w3c/webauthn#1663 (13 comments by @equalsJeffH, @rlin1, @timcappalli, @ve7jtb)
-
backup states in authenticator data w3c/webauthn#1695 (12 comments by @agl, @akshayku, @MasterKale, @rlin1, @timcappalli)
-
New PublicKeyCredential methods for JSON (de)serialization w3c/webauthn#1703 (4 comments by @emlun, @MasterKale)
-
Past meetings
-
2 meetings.
Participants
-
2 participants joined.
-
Paulo Lopes (IBM Corporation) joined.
-
Andre Büttner (W3C Invited Experts) joined.
-
-
1 participant left.
-
Joel Hartshorn (USAA) left.
-
-
1 organization left.
-
USAA left.
-
GitHub
w3c/webauthn
-
3 issues opened.
-
Backup state of credentials w3c/webauthn#1692, by @akshayku.
-
devicePubKey extension MUST be supported if multi-device WebAuthn credentials are used w3c/webauthn#1691, by @maxhata.
-
-
2 issues closed.
-
Incorrect "to create" phrase used in get() section's introduction? w3c/webauthn#1687.
-
9 issues received 108 new comments.
-
devicePubKey extension MUST be supported if multi-device WebAuthn credentials are used w3c/webauthn#1691 (60 comments by @akshayku, @arshadnoor, @cyberphone, @dwaite, @emlun, @equalsJeffH, @Firstyear, @MasterKale, @maxhata, @nicksteele, @rlin1, @sbweeden, @timcappalli, @ve7jtb)
-
Provide request deserialization, response serialization w3c/webauthn#1683 (17 comments by @dwaite, @Firstyear, @kreichgauer, @lgarron, @MasterKale, @sbweeden)
-
Backup state of credentials w3c/webauthn#1692 (9 comments by @agl, @akshayku, @dwaite, @emlun, @equalsJeffH, @sbweeden, @ve7jtb)
-
Syncing Platform Keys, Recoverability and Security levels w3c/webauthn#1640 (6 comments by @emlun, @Firstyear, @MeydanOzeri, @sbweeden)
-
Incorrect "to create" phrase used in get() section's introduction? w3c/webauthn#1687 (5 comments by @emlun, @equalsJeffH)
-
Synced/multi-device user Credentials w3c/webauthn#1665 (4 comments by @equalsJeffH, @MasterKale, @timcappalli)
-
Should an RP be able to provide finer grained authenticator filtering in attestation options? w3c/webauthn#1688 (4 comments by @agl, @dwaite, @emlun, @timcappalli)
-
Cross origin authentication without iframes (accommodating SPC in WebAuthn) w3c/webauthn#1667 (1 comment by @emlun)
-
-
1 pull request opened.
-
Change "create any credentials" to "create any assertions" in get() description w3c/webauthn#1693, by @emlun.
-
-
1 pull request merged.
-
1 pull request received 19 new comments.
-
device public key extension w3c/webauthn#1663 (19 comments by @emlun, @equalsJeffH, @Firstyear, @timcappalli)
-