David Waite

https://www.levolor.com will do a javascript faux-modal prompt for whether you are a California resident. Hush blocks the prompt, but that leaves a layer preventing site interaction.

compose control network domain name

18

When I create a "foo.com" network with docker-compose, the network appears to be changed and to be dynamic. The containers themselves talk to each other with TLS, and do hostname...

Provide request deserialization, response serialization

33

The addition of `ArrayBuffer` in the WebAuthn APIs has been an often-cited challenge for relying party developers, as JavaScript does not have integration for converting such buffers to text for...

Cleanup when creating discoverable credentials with attestations

8

When a relying party wishes to use attestations, the flow is one where the site presents the UX on what is acceptable, the user gestures an authenticator to create a...

Enterprise packed attestation guidance

2

Fixes #1916 Creates a new section describing verification when packed format is used for enterprise attestation. *** Preview | Diff

## Proposed Change To complement the new [Packed Attestation Statement Certificate Requirements](https://w3c.github.io/webauthn/#sctn-packed-attestation-cert-requirements) section, we should also describe requirements for packed attestations returned from Enterprise Attestation. This should describe the use...

Update to draft-ietf-cose-bls-key-representations-04

2

This is currently pending upstream library changes for access to x/y coordinates

In evaluating rules described for JPT, it makes sense to describe these in the JWP spec for all applications.

for single-use algorithm, document whether the issuer and holder algorithms may be different

4

From @OR13, https://mailarchive.ietf.org/arch/msg/jose/GkL3I9hEoKjaIDCgno_rYqQsSP0/ : > An example with a mixed algorithm for issue and holder would be nice here, or a comment about it being forbidden... for example issuer signing...