w3c/webauthn

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Verify signature first in RP operations? subtype:impl-cons type:editorial type:technical
#1064 opened Sep 10, 2018 by emlun L2-WD-00

2
Adding the way to get trust anchors for CTAP1/U2F authenticators stat:breaking type:technical
#1063 opened Sep 10, 2018 by Kieun L2-WD-00
Missing steps of checking pubKeyCredParams during registration step at RP server type:technical
#1061 opened Sep 10, 2018 by Kieun
No way to verify requireResidentKey during registration step at RP side stat:breaking type:technical
#1060 opened Sep 10, 2018 by Kieun L2-WD-00

4
export definitions? stat:OnGoing subtype:editorialConventions type:editorial
#1049 opened Aug 27, 2018 by equalsJeffH PropRec
Mobile support
#1045 opened Aug 24, 2018 by charlag PropRec

1
Unspecified CBOR encoding of high-valued integer numbers due to unspecified threshold stat:Discuss stat:breaking type:editorial type:technical
#1044 opened Aug 17, 2018 by peteroupc L2-WD-00

1
Divide Security/Privacy Considerations into subsections by audience? stat:OKtoDo subtype:privacy-cons subtype:security-cons type:editorial
#1039 opened Aug 14, 2018 by emlun L2-WD-00

4
appid extension output is inaccurate in some corner cases subtype:extensions type:technical
#1034 opened Aug 10, 2018 by emlun L2-WD-00

1
Ambiguous/wrong instructions in Android Key Attestation Statement Format verification procedure subtype:attestation type:editorial type:technical
#1022 opened Aug 2, 2018 by sbweeden PropRec

7
SafetyNet response as an extension
#1011 opened Jul 25, 2018 by gmandyam L2-WD-00

16
`publicKey` member name in `CredentialCreationRequestOptions` should be `"public-key"`, or vice-versa? stat:breaking subtype:algorithms/WebIDL subtype:credman type:technical
#1004 opened Jul 23, 2018 by equalsJeffH PropRec

13
Revise same-origin as ancestor requirements type:technical
#1001 opened Jul 18, 2018 by apowers313 L2-WD-00

4
coalesce HTML references? type:editorial
#996 opened Jul 11, 2018 by equalsJeffH REC

2
Indicate resident key credential "preferred" during registration and find out what the authenticator offered stat:breaking type:technical
#991 opened Jul 11, 2018 by sbweeden L2-WD-00

3
MUST authenticators still perform self attestation? stat:Discuss type:editorial type:technical
#978 opened Jul 2, 2018 by emlun L2-WD-00
truncation to 64-byte upper limit doesn't mention character boundaries i18n-comment type:technical
#973 opened Jun 27, 2018 by aphillips L2-WD-00

20
Consider allowing RPs to indicate that they want platform authenticators to be synced across devices type:technical
#969 opened Jun 25, 2018 by leshi L2-WD-00

12
SafetyNet Attestation Clarifications subtype:impl-cons
#968 opened Jun 23, 2018 by apowers313 L2-WD-00

7
Recovering from Device Loss type:technical
#931 opened Jun 5, 2018 by equalsJeffH L2-WD-00

4
TPM section is missing TPMT_PUBLIC validation steps type:technical
#929 opened Jun 1, 2018 by herrjemand L2-WD-00

3
Integrate with Feature Policy and define Feature-Identifier value for WebAuthn type:technical
#911 opened May 15, 2018 by equalsJeffH L2-WD-00

7
Return the employed AuthenticatorTransport when creating a new credential stat:breaking stat:pr-open subtype:algorithms/WebIDL type:technical
#889 opened Apr 30, 2018 by equalsJeffH L2-WD-00
NULL or DOMException subtype:credman type:technical
#876 opened Apr 20, 2018 by AngeloKai PropRec

14
cleanup: mark & structure biblio references consistently type:editorial
#872 opened Apr 17, 2018 by equalsJeffH REC

1

Previous 1 2 3 Next

ProTip! Add no:assignee to see everything that’s not assigned.