That's great to hear, Alex!! On FedCM, any suggestions / recommendations on where to go from here? We typically conduct our work at the FedID CG (and sporadically attend the Privacy CG, so both are good options for us to work together) and I hear that Tess is going through the requirements for Apple to join the FedID CG, so maybe we can start by agenda+-ing sometime to hear from you all where you stand on FedCM and gather early guidance / requirements at the Privacy CG? Thoughts on where to go from here? On Passkeys, we are ourselves super excited about passkeys and would very much like to see it coexist and succeed with FedCM! We've been working with Ken Buchanan, Adam Langley and Dirk Balfanz through the process of developing FedCM to make sure there is alignment between the two (and so far we believe there is a lot of synergy), but we never met anyone externally about the intersection. Again, any suggestions/recommendations on where to go from here? Would it be useful to come by sometime to the FIDO/WebAuthn meetings and say "hi" and go from there? Sam On Wed, Mar 23, 2022 at 2:36 PM Alex Christensen <achristensen@apple.com> wrote:

We are generally supportive and interested in working together to make this coexist well with passkeys.

On Mar 10, 2022, at 3:42 PM, Sam Goto via webkit-dev < webkit-dev@lists.webkit.org> wrote:

Hi WebKit-Dev, We've been working on a Web Platform API that allows users to login to websites with their federated accounts in a privacy preserving manner.

We've been calling it FedCM (was WebID) and we would like to hear what you think!

Here is our explainer, spec and a brief introduction:

- explainer <https://github.com/fedidcg/FedCM/blob/main/explainer.md> - specification <https://fedidcg.github.io/FedCM/> - TPAC2021 <https://watch.videodelivery.net/29bab61e04e8cabf1517e5885c9fe4cf> presentation (video introduction)

WDYT?

One specific area of coordination is its relationship to the Login Status API and the Storage Access API. We'd be happy to learn more from you about both of these APIs and how they relate to FedCM, but just as a starting point, here [1 <https://github.com/fedidcg/FedCM/blob/main/explainer.md#the--login-status-api>, 2 <https://github.com/fedidcg/FedCM/blob/main/explainer.md#the-storage-access-api>] is our interpretation of each.

Looking forward to hearing from you,

Sam Various other past reviews:

- WebID? <https://github.com/fedidcg/FedCM/issues/41> - WICG thread <https://discourse.wicg.io/t/proposal-webid-privacy-preserving-federated-sign-in-api/4661> - Federation and Browsers Workshop <https://github.com/fedidcg/FedCM/blob/main/meetings/2021/25-26_May_2021.md> - Intent To Prototype <https://groups.google.com/a/chromium.org/g/blink-dev/c/2B4TJ7j2U4M/m/1X5T3OszCAAJ> - FedID CG <https://www.w3.org/community/fed-id/> - early TAG review <https://github.com/w3ctag/design-reviews/issues/622> - Ready For Trial <https://groups.google.com/a/chromium.org/g/blink-dev/c/jlV_1m7uUAg> - spec TAG review <https://github.com/w3ctag/design-reviews/issues/718> - Mozilla's Standards Position <https://github.com/mozilla/standards-positions/issues/618>

_______________________________________________ webkit-dev mailing list webkit-dev@lists.webkit.org https://lists.webkit.org/mailman/listinfo/webkit-dev