Issues

• The user-activation requirement forces a redundant tap in cross-origin iframe and cross-site redirect flows

  w3c-fedid/digital-credentials#596 · Filter by author mallikarjunap opened on Oct 23, 2026

• Verifier authenticity and ecosystem barrier to entry

  w3c-fedid/digital-credentials#594 · Filter by author wes-smith opened on Oct 15, 2026
  1

• Multi-credential flows require a separate wallet handoff for every step

  w3c-fedid/digital-credentials#593 · Filter by author wes-smith opened on Oct 15, 2026

• Document the role of architectural layering in the Digital Credentials API

  agenda+tpac-2026
  w3c-fedid/digital-credentials#589 · Filter by author hlflanagan opened on Oct 8, 2026
  1

• Conditional invocation for Digital Credential presentation requests

  tpac-2026
  w3c-fedid/digital-credentials#587 · Filter by author mallikarjunap opened on Sep 22, 2026
  6

• Supporting a "receipt"-style API or callback

  enhancement
  Feature

  w3c-fedid/digital-credentials#583 · Filter by author timcappalli opened on Aug 31, 2026
  

• Annex C being optional

  w3c-fedid/digital-credentials#578 · Filter by author bc-pi opened on Aug 20, 2026
  16

• clientData (26H2 edition)

  spectpac-2026
  Feature

  w3c-fedid/digital-credentials#574 · Filter by author timcappalli opened on Aug 19, 2026
  3

  

• Should we warn the user when a request is not properly protected?

  w3c-fedid/digital-credentials#571 · Filter by author marcoscaceres opened on Aug 4, 2026
  3

• API does not expose the origin context used for response encryption

  w3c-fedid/digital-credentials#566 · Filter by author marcoscaceres opened on Jul 28, 2026

• Update CTAP 2.3 reference to PXP

  CR Blocker
  w3c-fedid/digital-credentials#565 · Filter by author timcappalli opened on Jul 24, 2026
  

• Prohibit delegating coordinator responsibilities to a credential manager without explicit permission

  spec
  w3c-fedid/digital-credentials#563 · Filter by author jschanck opened on Jul 22, 2026

• Move the opaque-origin rejection to Credential Management, keyed on origin bound

  w3c-fedid/digital-credentials#560 · Filter by author marcoscaceres opened on Jul 20, 2026

• clearing local storage should be communicated to wallets so as not to reintroduce cookie-like keys/signatures

  privacy-considerationsprivacy-tracker
  w3c-fedid/digital-credentials#551 · Filter by author npdoty opened on Jul 9, 2026
  1

• Spec doesn’t enforce encrypted response requirement

  privacy-considerations
  w3c-fedid/digital-credentials#519 · Filter by author marcoscaceres opened on May 18, 2026
  19

• Replace "MUST NOT throw" mediation prose with [[implicitMediation]] slot

  w3c-fedid/digital-credentials#510 · Filter by author marcoscaceres opened on May 7, 2026

• Include the requesting document's origin in the request context

  specsubstantive
  w3c-fedid/digital-credentials#504 · Filter by author marcoscaceres opened on Apr 29, 2026
  2

• Support testing of response parsing and validation failures in Virtual Wallet automation

  test suite
  w3c-fedid/digital-credentials#498 · Filter by author mohamedamir opened on Apr 16, 2026

• Rate limiting: implementer considerations

  security-considerations
  w3c-fedid/digital-credentials#495 · Filter by author marcoscaceres opened on Apr 9, 2026
  1

• Proposal: Relax transient user activation requirement for all DC API requests

  discussionspecsubstantive
  w3c-fedid/digital-credentials#478 · Filter by author mohamedamir opened on Mar 18, 2026
  4

  

• Define DC API behavior in Private Browsing Mode

  privacy-considerationsspec
  w3c-fedid/digital-credentials#416 · Filter by author mohamedamir opened on Dec 11, 2025
  4

  

• Privacy Considerations for Credential Issuance

  privacy-considerations
  w3c-fedid/digital-credentials#399 · Filter by author mohamedamir opened on Nov 27, 2025
  

• Wallet Selection Binding during Issuance

  CR Blockerspecsubstantivetpac-2026
  w3c-fedid/digital-credentials#382 · Filter by author leecam opened on Sep 28, 2025
  25

  

• Cross-origin mitigations can't be enforced at the wallet layer when multiple wallets are used

  privacy-considerationsspec
  w3c-fedid/digital-credentials#374 · Filter by author kdenhartog opened on Sep 8, 2025
  10

• Ensure that credential issuers do not discriminate based on the user’s device or OS

  discussion
  w3c-fedid/digital-credentials#349 · Filter by author DemiMarie opened on Aug 16, 2025
  7