Search results

Max-Age cookie attribute in JSON session credentials resulting in registration failure

Status: Open.

#230 In w3c/webappsec-dbsc;

· e-aakash opened on Oct 30, 2025

Changing which cookies are bound can be complex

Status: Open.

#227 In w3c/webappsec-dbsc;

· drubery opened on Oct 1, 2025

Strategy for rejecting any non compliant DBSC user agent on the server side

Status: Open.

#223 In w3c/webappsec-dbsc;

· reda-alaoui opened on Sep 18, 2025

Evaluate new possible credential types

Status: Open.

#211 In w3c/webappsec-dbsc;

· drubery opened on Aug 15, 2025

Make challenge lifetime browser-enforced

Status: Open.

#210 In w3c/webappsec-dbsc;

· drubery opened on Aug 15, 2025

JS bindings for usage of session keys

Status: Open.

#177 In w3c/webappsec-dbsc;

· drubery opened on May 12, 2025

JS bindings for session registration

Status: Open.

#176 In w3c/webappsec-dbsc;

· drubery opened on May 12, 2025

Consider Renaming "Device Bound Session Credentials" for Clarity

Status: Open.

#152 In w3c/webappsec-dbsc;

· kkoiwai opened on Apr 24, 2025

Synchronous operation and capability discovery

Status: Open.

#117 In w3c/webappsec-dbsc;

· sbweeden opened on Mar 17, 2025

HTTP Message Signatures

Status: Open.

#112 In w3c/webappsec-dbsc;

· jricher opened on Mar 5, 2025

Need for attestation?

Status: Open.

#34 In w3c/webappsec-dbsc;

· jackevans43 opened on Apr 7, 2024

timed refresh mechanism

Status: Open.

#33 In w3c/webappsec-dbsc;

· dickhardt opened on Apr 6, 2024