GitHub · Where software is built

Labels Milestones New issue

Loss, Theft, Damage, and Compromise with regards to authenticators

#3314

· sydseter opened

on Dec 12, 2025

Clarification: v5: V6.5 unclear storage requirements for email OTP

#3313

· macdonaldr93 opened

on Dec 10, 2025

Broken link to Threat Modeling project not picked up by URL check action

6) PR awaiting review

#3310

· jgadsden opened

on Dec 2, 2025

v5.0.0: 13.3.3 is too aggressive/vague

#3306

· narfbg opened

on Nov 22, 2025

v5.0.0: 6.5.7 conflict with NIST SP 800-63B-4

4) proposal for review

#3305

· narfbg opened

on Nov 20, 2025

Clarification: 2.3.3 "entirety or it is rolled back "

#3301

· ajayojha opened

on Nov 17, 2025

Clarification: 2.3.1 "same user" " expected sequential step order" "without skipping steps"

#3300

· ajayojha opened

on Nov 17, 2025

Clarification: V2 Text Statement "High‑value"

#3299

· ajayojha opened

on Nov 17, 2025

Clarification: V2 Text Statement "sequential, processed in order, and cannot be bypassed."

#3294

· ajayojha opened

on Nov 12, 2025

Clarification: V2 Text Statement "Business logic includes"

Will be closed if no response/opposite arguments

#3293

· ajayojha opened

on Nov 12, 2025

Clarification 1.2.1: How requirement apply to Single Page Applications (SPA) architectures

Will be closed if no response/opposite arguments

#3292

· ajayojha opened

on Nov 12, 2025

Clarification 1.1.2: How requirement apply to Single Page Applications (SPA) architectures

#3291

· ajayojha opened

on Nov 12, 2025