Known SPC requests
smcgruer@google.com
Feature / Request | Approx effort level required |
Allow SPC call without user activation | Done! (M118) |
SPC support for device-binding extension | Done! (M120) |
Support for userVerification=discouraged | Low |
Card art icon is too small | Moderate |
Fallback UX improvements | High |
Issuer and card network iconography | Moderate |
Support cross Android app/web flows (e.g., native SPC on Android) | High / Very High |
[Windows] Allow use of normal WebAuthn credentials for first-party SPC | Moderate |
[MacOS] Allow use of normal WebAuthn credentials for first-party SPC | Moderate |
Requests
Feature / Request | Approx effort level required |
Support Roaming Authenticators | Moderate / High |
Support Hybrid Authenticators | Moderate / High |
Minor experimental UX tweaks (e.g., experimenting with different text strings) | Very low! |
Remove/change primary iconography on SPC dialog | Moderate |
Show RP origin in SPC authn dialog | Low |
Support recurring payments in SPC | High |
Support non-payment use cases in SPC | High |
Requests
Feature / Request | Primary Deciding Party |
[Windows] Authenticator-level support for thirdPartyPayment bit | Microsoft |
[MacOS] Authenticator-level support for thirdPartyPayment bit | Apple |
[MacOS/iOS] Safari/WebKit support for SPC | Apple |
Ability to require biometrics for an authentication | WebAuthn/FIDO |
Attestation from authenticators | WebAuthn/FIDO/Authenticators |
Ability to know what authentication method was used by the authenticator | WebAuthn/FIDO |
Combine SPC transaction screen with FIDO biometric unlock in one screen | Platform Authenticators |
Get platform authenticator dialogs to stop saying "sign in" | Platform Authenticators |
Requests outside our (direct) control
Our requests to the WG