W3C

– DRAFT –
Web Authentication WG

01 June 2022

Attendees

Present
agl, akshay, ay, davidturner, davidwaite, elundberg, jfontana, johnbradley, johnpascoe, nadalin, nina, nsteele, timcappalli, wseltzer
Regrets
-
Chair
Fontana, Nadalin
Scribe
jfontana

Meeting minutes

tony: putting off the licensing decision
… don't know the issues.

wendy: ready to take that off the agenda

agl: caBLE is now called Hybrid

davidT: FIDO did not like this name

jbradley: we need to nail it down for the transport hint
… soem question if caBLE is a release thing or not
… are hints going to hang around

agl: I would like FIDO marketing group to choose things fairly quickly.

TimC: they know this is not a outward facing thing

davidT: need something to describe it.

agl: caBLE is the cross flow

wendy: should provide hosts with vaccination status before you go on site at Microsoft

jbradely: i think you need to do it the day before.

tony: pull requests

https://github.com/w3c/webauthn/pull/1703

agl: is matt around? missing

tony: need to look at this.

agl: looks like a future thing

https://github.com/w3c/webauthn/pull/1695

TimC: I thought it was done. need some sign-offs

https://github.com/w3c/webauthn/pull/1663

agl: there are changes. look at commits, attestation controls, signatures, etc.
… we might have a second sig.

jbradley: will there be different UI

agl: quite possibily, but the design is not done yet. Attestation controls will be with enterprise

jbradley: doesn authenticator need to dig around or get something from RP?

agl: authenticator gets attestation field. in reg. there is a flag, with assertions it does not now.

ago: browser can always set the value.
… the authenticator would figure it out from there.

jbradley: need some sort of filter.

agl: no. the authenticator still has to use to same rules
… it has to look at existing signal
… like CTAP 2'

jbradley: or it only works on mode1
… mode 1

agl: think CTAP tweak is needed for assertions.

https://github.com/w3c/webauthn/pull/1576

nina:
… akshay can you look at this?

Akshay: it is waiting on me and JBradley.

jbradley: I will look at it next week.

tony: akshay willl you be on?

Aksahy: yes, where I left off

https://github.com/w3c/webauthn/pull/1736

agl: looks good to me.
… should land next week

https://github.com/w3c/webauthn/pull/1737

nSteele: we talked about this. this takes out mention of some pass throughs

tonuy: you will take this one.

https://github.com/w3c/webauthn/pull/1733

tony: go back to emil, his is on the line

elundberg: this is nothing to correct #1736

elundburg: who reviews now that jeff is gone

agl: I have approved it.

tony: matt needs to approve

https://github.com/w3c/webauthn/pull/1733

elundberg: need to add reviewers

akshay: I will look

https://github.com/w3c/webauthn/pull/1732

agl: this is revert to some commits for PR extension

tony: will we see the same issues

akshay: the arguments are lessened now

wendy: mozilla is back in the group

tony: target this at Mozilla

https://github.com/w3c/webauthn/pull/1718

agl: not sure this PR is headed to inclusion

elundberg: I agree

elundberg: I will look at it.

tony: I will leave as un-triaged

https://github.com/w3c/webauthn/pull/1730

elundberg: PR open

tony: you feel this will break

agl: removing generic processing - it is a non-breaking change.

https://github.com/w3c/webauthn/pull/1713

eluncberg: wanted to focus on transports
… not more to say here.

akshay: close

https://github.com/w3c/webauthn/pull/1711

elunberg: I intend to talk this on some time.
… this is worth doing
… get in #1063 and #1064

https://github.com/w3c/webauthn/pull/1710

elundberg: will do that one as well

https://github.com/w3c/webauthn/pull/1708

agl: we don't have a way to talk about this
… it is part of Passkey

TimC: this will come for Passkey site

https://github.com/w3c/webauthn/pull/1681

tony: this may go back to payments.
… assume this will get fixed when needed.

agl: not sure the name is pertinent

tony: any issues we want to talk about?
… before the face to face.

agl: deprecation of U2F API in Chrome is expiring at end of July, speak to us very, very soon.
… we like some change to Chrome are coming, we will send out notice ahead of time , but where.

TimC: the Community Adoption WG
… do it via Slack
… we can share from the email list

Minutes manually created (not a transcript), formatted by scribe.perl version 185 (Thu Dec 2 18:51:55 2021 UTC).

Diagnostics

Succeeded: s/share/provide hosts with/

Succeeded: s/a slide/from the email list/

No scribenick or scribe found. Guessed: jfontana

Maybe present: ago, Aksahy, davidT, elunberg, eluncberg, elundburg, jbradely, jbradley, TimC, tonuy, tony, wendy