Issues

• Support passive Digital Credential invocation for seamless authentication, identity verification, and payment authorization

  w3c-fedid/digital-credentials#587 · Filter by author mallikarjunap opened on Sep 22, 2026
  5

• Supporting a "receipt"-style API or callback

  enhancement
  Feature

  w3c-fedid/digital-credentials#583 · Filter by author timcappalli opened on Aug 31, 2026
  

• Annex C being optional

  w3c-fedid/digital-credentials#578 · Filter by author bc-pi opened on Aug 20, 2026
  15

• clientData (26H2 edition)

  spec
  Feature

  w3c-fedid/digital-credentials#574 · Filter by author timcappalli opened on Aug 19, 2026
  3

  

• Should we warn the user when a request is not properly protected?

  w3c-fedid/digital-credentials#571 · Filter by author marcoscaceres opened on Aug 4, 2026
  3

• API does not expose the origin context used for response encryption

  w3c-fedid/digital-credentials#566 · Filter by author marcoscaceres opened on Jul 28, 2026

• Update CTAP 2.3 reference to PXP

  CR Blocker
  w3c-fedid/digital-credentials#565 · Filter by author timcappalli opened on Jul 24, 2026
  

• Prohibit delegating coordinator responsibilities to a credential manager without explicit permission

  spec
  w3c-fedid/digital-credentials#563 · Filter by author jschanck opened on Jul 22, 2026

• Move the opaque-origin rejection to Credential Management, keyed on origin bound

  w3c-fedid/digital-credentials#560 · Filter by author marcoscaceres opened on Jul 20, 2026

• clearing local storage should be communicated to wallets so as not to reintroduce cookie-like keys/signatures

  privacy-considerationsprivacy-tracker
  w3c-fedid/digital-credentials#551 · Filter by author npdoty opened on Jul 9, 2026
  1

• Spec doesn’t enforce encrypted response requirement

  privacy-considerations
  w3c-fedid/digital-credentials#519 · Filter by author marcoscaceres opened on May 18, 2026
  19

• Replace "MUST NOT throw" mediation prose with [[implicitMediation]] slot

  w3c-fedid/digital-credentials#510 · Filter by author marcoscaceres opened on May 7, 2026

• Include the requesting document's origin in the request context

  specsubstantive
  w3c-fedid/digital-credentials#504 · Filter by author marcoscaceres opened on Apr 29, 2026
  2

• Support testing of response parsing and validation failures in Virtual Wallet automation

  test suite
  w3c-fedid/digital-credentials#498 · Filter by author mohamedamir opened on Apr 16, 2026

• Rate limiting: implementer considerations

  security-considerations
  w3c-fedid/digital-credentials#495 · Filter by author marcoscaceres opened on Apr 9, 2026

• Protocol Integrity Requirements for Request/Response Tampering

  security-considerationssecurity-tracker
  w3c-fedid/digital-credentials#494 · Filter by author simoneonofri opened on Apr 9, 2026
  3

• Adding Signature as Response for Tampering and consider Encryption

  security-considerationssecurity-tracker
  Task

  w3c-fedid/digital-credentials#479 · Filter by author simoneonofri opened on Mar 18, 2026
  

• Proposal: Relax transient user activation requirement for all DC API requests

  discussionspecsubstantive
  w3c-fedid/digital-credentials#478 · Filter by author mohamedamir opened on Mar 18, 2026
  4

  

• Define DC API behavior in Private Browsing Mode

  privacy-considerationsspec
  w3c-fedid/digital-credentials#416 · Filter by author mohamedamir opened on Dec 11, 2025
  4

  

• Privacy Considerations for Credential Issuance

  privacy-considerations
  w3c-fedid/digital-credentials#399 · Filter by author mohamedamir opened on Nov 27, 2025
  

• Wallet Selection Binding during Issuance

  CR Blockerspecsubstantive
  w3c-fedid/digital-credentials#382 · Filter by author leecam opened on Sep 28, 2025
  23

  

• Cross-origin mitigations can't be enforced at the wallet layer when multiple wallets are used

  privacy-considerationsspec
  w3c-fedid/digital-credentials#374 · Filter by author kdenhartog opened on Sep 8, 2025
  10

• Ensure that credential issuers do not discriminate based on the user’s device or OS

  discussion
  w3c-fedid/digital-credentials#349 · Filter by author DemiMarie opened on Aug 16, 2025
  7

  

• Top frame origin should be passed to client platforms and credential managers for cross-origin requests

  spec
  w3c-fedid/digital-credentials#333 · Filter by author timcappalli opened on Aug 6, 2025
  2

• Add guidance to verifiers/issuers and clients/client platforms on cross-origin usage

  spec
  w3c-fedid/digital-credentials#332 · Filter by author timcappalli opened on Aug 6, 2025
  4