List view

Add hybrid fallback URL extension

needs-explainer

stat:Discuss

subtype:FeatureProposal

Status: Open.

Feature

#2341 In w3c/webauthn;

· harshlal028 opened on Oct 15, 2025

Deprecate AuthenticatorAttachment in favor of PublicKeyCredentialHints.

@RiskItems that are at risk for L3Items that are at risk for L3

type:technical

Status: Open.

#2053 In w3c/webauthn;

· akshayku opened on Mar 27, 2024

CollectedClientData serialization is confusing WebIDL and/or Infra values for ECMAScript values

type:technical

Status: Open.

#2056 In w3c/webauthn;

· petervanderbeken opened on Apr 15, 2024

excludeCredentials on Get

@RiskItems that are at risk for L3Items that are at risk for L3

stat:Discuss

subtype:FeatureProposal

type:technical

Status: Open.

#2057 In w3c/webauthn;

· christiaanbrand opened on Apr 19, 2024

Additional guidance/clarification on RP ID and origin validation

type:technical

Status: Open.

#2059 In w3c/webauthn;

· zacknewman opened on Apr 21, 2024

[[Create]] should not access the global object directly

@RiskItems that are at risk for L3Items that are at risk for L3

type:technical

Status: Open.

#2092 In w3c/webauthn;

· nsatragno opened on Jul 2, 2024

Return more nuanced errors

type:technical

Status: Open.

#2096 In w3c/webauthn;

· MasterKale opened on Jul 12, 2024

UTF-8 decode should not be required for response.clientDataJSON and cData

@RiskItems that are at risk for L3Items that are at risk for L3

type:technical

Status: Open.

#2100 In w3c/webauthn;

· zacknewman opened on Jul 18, 2024

Allow Conditional Mediation without autofill

@RiskItems that are at risk for L3Items that are at risk for L3

subtype:FeatureProposal

type:technical

Status: Open.

#2144 In w3c/webauthn;

· kenrb opened on Sep 10, 2024

Allow <code>platform</code>-based self attestation with non-zero AAGUID when <code>AttestationConveyancePreferenceOption</code> <code>"none"</code> is used

type:technical

Status: Open.

#2146 In w3c/webauthn;

· zacknewman opened on Sep 11, 2024

Add <code>challengeUrl</code>

stat:Discuss

subtype:FeatureProposal

type:technical

Status: Open.

#2152 In w3c/webauthn;

· nsatragno opened on Sep 24, 2024

Add AAGUID to credProps

stat:Discuss

type:technical

Status: Open.

#2157 In w3c/webauthn;

· timcappalli opened on Sep 26, 2024

[Editorial] platform authenticator relationship to WebAuthn Client and Client Device

type:editorial

Status: Open.

#2164 In w3c/webauthn;

· timcappalli opened on Oct 1, 2024

Handling of non-fully active documents for PublicKeyCredential methods

type:technical

Status: Open.

#2184 In w3c/webauthn;

· nsatragno opened on Oct 9, 2024

Usage of "effective domain" seems wrong

stat:Discuss

type:technical

Status: Open.

#2205 In w3c/webauthn;

· annevk opened on Nov 18, 2024

Use of "valid domain" seems wrong

stat:Discuss

Status: Open.

#2206 In w3c/webauthn;

· annevk opened on Nov 18, 2024

JSON parsing should be on top of Infra primitives

Status: Open.

#2207 In w3c/webauthn;

· annevk opened on Nov 18, 2024

"Verify" is undefined

type:editorial

type:technical

Status: Open.

#2208 In w3c/webauthn;

· annevk opened on Nov 18, 2024

<code>credProps</code> output directions contradict notes

type:editorial

Status: Open.

#2213 In w3c/webauthn;

· zacknewman opened on Nov 23, 2024

Allow immediate mediation

stat:Discuss

subtype:FeatureProposal

TPAC 2025Discuss @ TPACDiscuss @ TPAC

type:technical

Status: Open.

#2228 In w3c/webauthn;

· deephand opened on Jan 14, 2025

Conditional creation incompatible with <code>uvInitialized</code> semantics in Chapter 7?

type:technical

Status: Open.

#2295 In w3c/webauthn;

· arianvp opened on May 14, 2025

Explainer for Level 4

type:explainer

Status: Open.

Task

#2297 In w3c/webauthn;

· timcappalli opened on May 28, 2025

Push due date of milestone to after we reconvene

type:process

Status: Open.

#2332 In w3c/webauthn;

· nicksteele opened on Sep 11, 2025

WebAuthn requestUserInfo -- easier account creation

stat:Discuss

subtype:FeatureProposal

TPAC 2025Discuss @ TPACDiscuss @ TPAC

type:technical

Status: Open.

Feature

#2336 In w3c/webauthn;

· nsatragno opened on Oct 1, 2025

Discovery of migrated credentials

stat:Discuss

subtype:FeatureProposal

TPAC 2025Discuss @ TPACDiscuss @ TPAC

Status: Open.

#2340 In w3c/webauthn;

· sbweeden opened on Oct 14, 2025