w3c / webappsec-change-password-url

A Well-Known URL for Changing Passwords

https://w3c.github.io/webappsec-change-password-url/

w3c/webappsec-change-password-url Issues

Normative references to discontinued specs in A Well-Known URL for Changing Passwords
Updated 7 months ago
Be explicit that this specification is about "changing a password", not "resetting a password"
Updated 2 years ago
Any follow-up drafts for fully automated password change?
Updated 2 years ago6
Clarify that redirects should be followed to resolve the Change Password URL
Updated 3 years ago1
Migrate to WebAppSec?
Closed 3 years ago7
Register with IANA
Updated 4 years ago
Update references & redirects to these documents
Updated 4 years ago
Specifying navigations affected by .well-known/change-password
Updated 4 years ago
Who supports this?
Updated 4 years ago9
response-code-reliability checking for OK Status
Updated 4 years ago
Malicious subdomain concern
Updated 4 years ago3
Broken reference for "Appropriate Use of Well-Known URIs"
Updated 4 years ago
Use GitHub Actions for deploying spec to the gh-pages branch
Closed 4 years ago
Main branch should be named 'main'
Closed 4 years ago1
What about a link relation type?
Updated 4 years ago3
Expand security considerations section
Updated 4 years ago1
Consider ways of differentiating implementation and poor error pages
Closed 4 years ago6
Add informative text clarifying that servers may use complex logic to determine where to redirect to
Updated 5 years ago4
Restrict redirection status codes to temporary ones
Closed 5 years ago2
Consider restricting the target of the redirect to be same-origin
Closed 5 years ago3
Punycode?
Closed 5 years ago3
Pathway to W3C adoption
Closed 5 years ago3
Adopt pr-preview
Closed 6 years ago1
What should clients do on OK status?
Updated 6 years ago1
Add a parameter to specify a language version of the app
Closed 6 years ago1
Clarify interpretation of RFC5785 §1.1
Updated 6 years ago
Use RFC2119 to put constraints on actors doing $foo, not on things being $bar or having $baz
Closed 6 years ago2
Consider adding a bit more detail to the generation algorithm.
Closed 6 years ago3
base origin has multiple apps
Closed 6 years ago6
Figure out how to get this to show up on wicg.github.io
Closed 6 years ago1