ntent to Implement and Ship: WebAuthn getPublicKey[Algorithm]() and getAuthenticatorData()

[Adam Langley]

Contact emails a...@chromium.org Explainer https://w3c.github.io/webauthn/#sctn-public-key-easy Design docs/spec Specification: https://w3c.github.io/webauthn/#sctn-public-key-easy TAG review No. Only minor API change. Summary The draft of WebAuthn level two includes accessors that save sites from having to parse CBOR and COSE in order to use security keys. This status entry covers implementation of these accessors in Chromium. Motivation CBOR and COSE are somewhat obscure at this time and there's no need for most sites to have to worry about them as the browser is capable of translating them into more standard formats. Risks

Interoperability and Compatibility Only new functions getting added. Firefox: Public support (https://github.com/w3c/webauthn/pull/1395) (J.C. reviewed spec PR.) Edge: No public signals Safari: No public signals Web developers: No signals

Will this feature be supported on all six Blink platforms (Windows, Mac, Linux, Chrome OS, Android, and Android WebView)?

Android support will come later. Android WebView does not support security key interactions due to the need to authenticate the calling site.

Is this feature fully tested by web-platform-tests?

Yes WPT included in CL: https://chromium-review.googlesource.com/c/chromium/src/+/2204087 Tracking bug https://bugs.chromium.org/p/chromium/issues/detail?id=1083301 Link to entry on the Chrome Platform Status https://chromestatus.com/feature/5102556109864960

[Reilly Grant]

The subject line is missing the first letter of the word "Intent" so this probably won't be picked up by automated scripts. I recommend resending this intent with a corrected subject line.

Reilly Grant | Software Engineer | rei...@chromium.org | Google Chrome

--
You received this message because you are subscribed to the Google Groups "blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAL9PXLwxAkMNzUQUJe396igfvk%3DSVHPiu95NP6kE783q9TegMg%40mail.gmail.com.

[Adam Langley]

On Tue, May 26, 2020 at 10:20 AM Reilly Grant <rei...@chromium.org> wrote:

The subject line is missing the first letter of the word "Intent" so this probably won't be picked up by automated scripts. I recommend resending this intent with a corrected subject line.

Thanks for noticing that. Will do.