w3c / webappsec-dbsc Public

Notifications You must be signed in to change notification settings
Fork 30
Star 366

Code
Issues 16
Pull requests 4
Discussions
Actions
Projects
Wiki
Security
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Projects
Wiki
Security
Insights

Issues: w3c/webappsec-dbsc

Beta

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

16 Open 66 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels

or ⇧ + click/return for logical OR

Projects

Filter by project

Milestones

Filter by milestone

Assignee

Filter by who’s assigned

Assigned to nobody

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated Best match

Most reactions

Issues list

Consider Renaming "Device Bound Session Credentials" for Clarity

#152 opened Apr 24, 2025 by kkoiwai

Synchronous operation and capability discovery

#117 opened Mar 17, 2025 by sbweeden

HTTP Message Signatures

#112 opened Mar 5, 2025 by jricher

StartSession requests only include cookies with SameSite=None

#106 opened Feb 28, 2025 by frankeld

Required/optional credential cookie attributes need to be defined

#104 opened Feb 20, 2025 by sbweeden

how are endpoints conveyed from server to browser? Has initial answer

Has at least one answer from admins

#45 opened Apr 9, 2024 by bc-pi

jti/nonce/challenge value? Has initial answer

Has at least one answer from admins

#43 opened Apr 9, 2024 by bc-pi

[Fetch] What's stopping us from using the Fetch API configuration to support this? Has initial answer

Has at least one answer from admins

#39 opened Apr 9, 2024 by wparad

MVP Recommendation: TOTP

#36 opened Apr 8, 2024 by wparad

Need for attestation?

#34 opened Apr 7, 2024 by jackevans43

timed refresh mechanism

#33 opened Apr 6, 2024 by dickhardt

#32 opened Apr 6, 2024 by dickhardt

alignment with OAuth 2 flows for 1P authorization servers

#31 opened Apr 6, 2024 by dickhardt

Question RE: Tracking and Identity Providers

#24 opened Apr 4, 2024 by whitehatguy

Require request signing for proof-of-possession

#23 opened Apr 4, 2024 by joaopenteado

The scheme is a little bit redundant for a redirect-based auth

#12 opened Jan 4, 2024 by alextok

ProTip! no:milestone will show everything without a milestone.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly