[webkit-dev] Request for position: WebAuthn support for credBlob and minimum PIN length

[Adam Langley via webkit-dev]

Dear WebKit folks,

We (Chromium) are fleshing out our support for WebAuthn Level Two
 and CTAP 2.1

(the
corresponding protocol between devices and security keys).

As part of that we're interested in any WebKit opinions about the following:


CTAP 2.1 credBlob extension

 (Intent thread

, platform status entry 
):

This is a bytestring stored by the authenticator, just like the user
handle, but a separate value. Microsoft plan to use it in mixed web/native
contexts to store the hash of some externally-provided information in order
to authenticate it.

(This only involves an IDL change in Chromium due to the way that we
implemented authenticator extensions, it might not need code changes in
WebKit.)


Minimum PIN lengths

(not
yet the subject of an Intent to Ship):

This allows enterprises to configure a minimum PIN length greater than the
default value of four. It  also involves an extension

to
report, to the enterprise, what minimum is in effect. The extension will
involve IDL changes in Chromium for the same reason, and our PIN-related
management UIs would have to be updated to respect the configured minimum.


Cheers

AGL
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

[webkit-dev] Request for position: Media Session video conferencing actions

[Tommy Steimel via webkit-dev]

Hi webkit-dev,

This is a request for WebKit's position on adding video conferencing
actions to the Media Session API spec. Note that this is the proposal that
was discussed on the March 9th 2021 Media WG meeting.

Spec change explainer:
https://gist.github.com/steimelchrome/d52f0fb9a0a13c63a3cf2d4134b71682

Discussion (first comment is a copy of the explainer above):
https://github.com/w3c/mediasession/issues/264

Summary:

To make the Media Session API more useful for video conferencing websites,
we'd like to add "togglemicrophone", "togglecamera", and "hangup" actions
to the list of supported Media Session Actions.

Thanks,
Tommy
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev