Akshay Kumar

Cross origin authentication without iframes (accommodating SPC in WebAuthn)

55

On WebAuthn WG call on 2021-08-25, a proposal concerning [secure payment confirmation (SPC)](https://github.com/w3c/secure-payment-confirmation) was discussed which probably originated from web payments groups. Attaching for more details: [[WebAuthn WG August 2021]...

Syncing Platform Keys, Recoverability and Security levels

19

There are various user combinations and RP security needs which makes it tricky to have a unified solution as well as solve recoverability. Sometimes, goals become contradictory. Like RP has...

Deprecate AuthenticatorAttachment in favor of PublicKeyCredentialHints.

16

## Background We have introduced PublicKeyCredentialHints for RP to better convey intention of which transport is preferred for both credential creation and authentication. Previously, AuthenticatorAttachment was used to convey similar...

Add examples for PRF extension

1

## Proposed Change Multiple people who are implementing PRF extensions have got the implementation wrong regarding extension fields in request and response. We have to add some examples for this...