Search results

5.4.3 "the user handle ought not be" -> RFC 2119 Terminology

type:editorial

Status: Open.

#2431 In w3c/webauthn;

· My1 opened on May 25, 2026

remoteClientDataJSON: default allowlist 'none' is not yet defined in Permissions Policy spec

type:editorial

Status: Open.

#2430 In w3c/webauthn;

· bobomb opened on May 18, 2026

Fix compatibility with Bikeshed 7

type:editorial

type:process

Status: Open.

#2428 In w3c/webauthn;

· emlun opened on May 15, 2026

·  

L4 (First Published Working Draft)

Missing validation of rpId before Related Origins fetch

type:editorial

Status: Open.

#2422 In w3c/webauthn;

· a2kolbasov opened on Apr 29, 2026

Post Quantum Crypto and WebAuthn Transition for RP

type:technical

Status: Open.

#2417 In w3c/webauthn;

· akshayku opened on Apr 22, 2026

·  

L4 WD02 Milestone

Related origin validation should reference the Fetch spec

type:technical

Status: Open.

#2408 In w3c/webauthn;

· kreichgauer opened on Apr 10, 2026

Call for editors for WebAuthn L4

type:editorial

Status: Open.

Task

#2406 In w3c/webauthn;

· nadalin opened on Apr 1, 2026

·  

L4 WD02 Milestone

Merge changes made in L3-CR branch into main

type:editorial

Status: Open.

#2405 In w3c/webauthn;

· selfissued opened on Apr 1, 2026

Add CTAP2.3 version string for virtual authenticators

type:technical

Status: Open.

#2404 In w3c/webauthn;

· emlun opened on Apr 1, 2026

·  

L4 (First Published Working Draft)

Reconcile hybrid vs PXP throughout the spec

type:editorial

Status: Open.

#2401 In w3c/webauthn;

· timcappalli opened on Mar 26, 2026

[L3 REC] Transition Request Draft

type:process

Status: Open.

#2399 In w3c/webauthn;

· simoneonofri opened on Mar 25, 2026

Passkeys are phishing-resistant… but what if the device is compromised?

stat:Discuss

Status: Open.

#2396 In w3c/webauthn;

· aniketd1 opened on Mar 15, 2026