List view

Add "sign" extension

@RiskItems that are at risk for L3Items that are at risk for L3

stat:Discuss

subtype:extensions

subtype:FeatureProposal

type:technical

Status: Draft (not ready).

w3c/webauthnnumber 2078

#2078 In w3c/webauthn;

· emlun opened on May 28, 2024

Return more nuanced errors

type:technical

Status: Open.

#2096 In w3c/webauthn;

· MasterKale opened on Jul 12, 2024

Allow Conditional Mediation without autofill

@RiskItems that are at risk for L3Items that are at risk for L3

type:technical

Status: Open.

#2144 In w3c/webauthn;

· kenrb opened on Sep 10, 2024

Add new error codes

@RiskItems that are at risk for L3Items that are at risk for L3

Status: Open (in progress).

w3c/webauthnnumber 2095

#2095 In w3c/webauthn;

· MasterKale opened on Jul 11, 2024

Exclude all platform authenticators that use self attesation from hav…

@RiskItems that are at risk for L3Items that are at risk for L3

type:technical

Status: Open (in progress).

w3c/webauthnnumber 2150

#2150 In w3c/webauthn;

· zacknewman opened on Sep 19, 2024

UTF-8 decode should not be required for response.clientDataJSON and cData

@RiskItems that are at risk for L3Items that are at risk for L3

type:technical

Status: Open.

#2100 In w3c/webauthn;

· zacknewman opened on Jul 18, 2024

Should an RP be able to provide finer grained authenticator filtering in attestation options?

@RiskItems that are at risk for L3Items that are at risk for L3

stat:Discuss

TPAC 2025Discuss @ TPACDiscuss @ TPAC

type:technical

Status: Open.

#1688 In w3c/webauthn;

· sbweeden opened on Dec 21, 2021

Support for remote desktops

@RiskItems that are at risk for L3Items that are at risk for L3

type:technical

Status: Open.

#1577 In w3c/webauthn;

· agl opened on Feb 24, 2021

Add <code>challengeUrl</code>

stat:Discuss

type:technical

Status: Open.

#2152 In w3c/webauthn;

· nsatragno opened on Sep 24, 2024

Handling of non-fully active documents for PublicKeyCredential methods

type:technical

Status: Open.

#2184 In w3c/webauthn;

· nsatragno opened on Oct 9, 2024

Add AAGUID to credProps

stat:Discuss

type:technical

Status: Open.

#2157 In w3c/webauthn;

· timcappalli opened on Sep 26, 2024

excludeCredentials on Get

@RiskItems that are at risk for L3Items that are at risk for L3

stat:Discuss

subtype:FeatureProposal

type:technical

Status: Open.

#2057 In w3c/webauthn;

· christiaanbrand opened on Apr 19, 2024

Deprecate AuthenticatorAttachment in favor of PublicKeyCredentialHints.

@RiskItems that are at risk for L3Items that are at risk for L3

type:technical

Status: Open.

#2053 In w3c/webauthn;

· akshayku opened on Mar 27, 2024

Clarify the need for truly randomly generated challenges (aka challenge callback issue)

@RiskItems that are at risk for L3Items that are at risk for L3

type:editorial

Status: Open.

#1856 In w3c/webauthn;

· dolda2000 opened on Feb 20, 2023

Allow <code>platform</code>-based self attestation with non-zero AAGUID when <code>AttestationConveyancePreferenceOption</code> <code>"none"</code> is used

type:technical

Status: Open.

#2146 In w3c/webauthn;

· zacknewman opened on Sep 11, 2024

Additional guidance/clarification on RP ID and origin validation

type:technical

Status: Open.

#2059 In w3c/webauthn;

· zacknewman opened on Apr 21, 2024

CollectedClientData serialization is confusing WebIDL and/or Infra values for ECMAScript values

type:technical

Status: Open.

#2056 In w3c/webauthn;

· petervanderbeken opened on Apr 15, 2024

CollectedClientData.crossOrigin default value and whether it is required

@RiskItems that are at risk for L3Items that are at risk for L3

type:editorial

Status: Open.

#1631 In w3c/webauthn;

· equalsJeffH opened on Jun 19, 2021

Unicode "tag" characters are deprecated for language tagging

@RiskItems that are at risk for L3Items that are at risk for L3

i18n-needs-resolutionIssue the Internationalization Group has raised and looks for a response on.Issue the Internationalization Group has raised and looks for a response on.

type:technical

Status: Open.

#1642 In w3c/webauthn;

· aphillips opened on Jul 9, 2021

Use of in-field metadata not preferred

@RiskItems that are at risk for L3Items that are at risk for L3

i18n-needs-resolutionIssue the Internationalization Group has raised and looks for a response on.Issue the Internationalization Group has raised and looks for a response on.

stat:pr-open

type:technical

Status: Open.

#1643 In w3c/webauthn;

· aphillips opened on Jul 9, 2021

Mechanism for encoding *direction* metadata may need more work

@RiskItems that are at risk for L3Items that are at risk for L3

i18n-needs-resolutionIssue the Internationalization Group has raised and looks for a response on.Issue the Internationalization Group has raised and looks for a response on.

type:editorial

type:technical

Status: Open.

#1644 In w3c/webauthn;

· aphillips opened on Jul 9, 2021

[Editorial] Truncation description inaccurate

@RiskItems that are at risk for L3Items that are at risk for L3

i18n-needs-resolutionIssue the Internationalization Group has raised and looks for a response on.Issue the Internationalization Group has raised and looks for a response on.

stat:pr-open

type:editorial

Status: Open.

#1645 In w3c/webauthn;

· aphillips opened on Jul 9, 2021

Trailing position of metadata

@RiskItems that are at risk for L3Items that are at risk for L3

i18n-needs-resolutionIssue the Internationalization Group has raised and looks for a response on.Issue the Internationalization Group has raised and looks for a response on.

type:technical

Status: Open.

#1646 In w3c/webauthn;

· aphillips opened on Jul 9, 2021

Lookup Credential Source by Credential ID Algorithm returns sensitive data such as the credential private key

@RiskItems that are at risk for L3Items that are at risk for L3

type:editorial

Status: Open.

#1678 In w3c/webauthn;

· equalsJeffH opened on Oct 28, 2021

Platform Errors for attestations.

type:technical

Status: Open.

#1697 In w3c/webauthn;

· ve7jtb opened on Feb 9, 2022