webauthn icon indicating copy to clipboard operation
webauthn copied to clipboard

Web Authentication: An API for accessing Public Key Credentials

Results 232 webauthn issues
Sort by recently updated
recently updated
newest added

In #1637 I wrote: > As a measure to potentially address some of the challenges of introducing syncable credentials we have [floated](https://github.com/w3c/webauthn/issues/1546) the idea that syncable credentials may be paired...

stat:pr-open

Dear WG members, With the publication of WebAuthn Level Two and CTAP 2.1, the WebAuthn standard is now reasonably mature. Google has been talking with some other parties about how...

type:technical
@Risk

at the end of section 8.1. Attestation Statement Format Identifiers, we say: > The up-to-date list of registered WebAuthn Extensions is maintained in the IANA "WebAuthn Attestation Statement Format Identifiers"...

type:editorial

There are various user combinations and RP security needs which makes it tricky to have a unified solution as well as solve recoverability. Sometimes, goals become contradictory. Like RP has...

type:technical
@Risk

Unsolicited dialogs or alerts are often disruptive and hated by users. The Level 1 spec didn’t require and foresee that disruptive UI would be shown in response to makeCredential or...

type:technical
stat:breaking

6.4.2. Language and Direction Encoding https://www.w3.org/TR/webauthn-2/#sctn-strings-langdir > The second consists of a single code point which is either U+200E (“LEFT-TO-RIGHT MARK”), U+200F (“RIGHT-TO-LEFT MARK”), or U+E007F (“CANCEL TAG”). The first...

type:technical
type:editorial
i18n-needs-resolution
@Risk

the [Lookup Credential Source by Credential ID Algorithm](https://www.w3.org/TR/webauthn/#sctn-op-lookup-credsource-by-credid) is presently used only in internal-to-the-authenticator operations, namely in authenticatorMakeCredential and authenticatorGetAssertion. The result of [Lookup Credential Source by Credential ID Algorithm](https://www.w3.org/TR/webauthn/#sctn-op-lookup-credsource-by-credid)...

type:editorial
@Risk

6.4.2. Language and Direction Encoding https://www.w3.org/TR/webauthn-2/#sctn-strings-langdir The original draft of this section had the language tag and direction metadata preceding the string. At my (@aphillips) suggestion it was moved to...

type:technical
i18n-needs-resolution
@Risk

6.4.2. Language and Direction Encoding https://www.w3.org/TR/webauthn-2/#sctn-strings-langdir > The first encodes a language tag with the code point U+E0001 followed by the ASCII values of the language tag each shifted up...

type:technical
i18n-needs-resolution
stat:pr-open
@Risk

6.4.2. Language and Direction Encoding https://www.w3.org/TR/webauthn-2/#sctn-strings-langdir > The first encodes a language tag with the code point U+E0001 followed by the ASCII values of the language tag each shifted up...

type:technical
i18n-needs-resolution
@Risk