# W3C

Published articles for W3C.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Support the well-known change password URL with Appwrite Auth

DevFeed: [Support the well-known change password URL with Appwrite Auth](<https://devfeed.tech/articles/support-the-well-known-change-password-url-with-appwrite-auth-31444.md>)

Original publisher: [Read original article](<https://appwrite.io/blog/post/well-known-change-password-url>)

Author: Atharva Deosthale

Published: 2026-09-16T00:00:00Z

Content type: tutorial

Language: en

Sources: [Appwrite Blog](<https://devfeed.tech/sources/appwrite-blog.md>)

Topics: [passwords](<https://devfeed.tech/topics/passwords.md>), [Appwrite](<https://devfeed.tech/topics/appwrite.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>), [W3C](<https://devfeed.tech/topics/w3c.md>)

Tags: [bitwarden](<https://devfeed.tech/tags/bitwarden.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [passwords](<https://devfeed.tech/tags/passwords.md>), [security](<https://devfeed.tech/tags/security.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>), [tutorials](<https://devfeed.tech/tags/tutorials.md>), [w3c](<https://devfeed.tech/tags/w3c.md>)

### AI overview

This tutorial shows how to support the well-known change password URL in a TanStack Start app using Appwrite Auth. It explains the redirect, the change-password form for signed-out visitors, autocomplete hints, and deployment to Appwrite Sites.

### Source excerpt

Password managers open /.well-known/change-password when they find a leaked or weak password. Add the redirect and a change password page backed by Appwrite Auth.

## OpenTelemetry proposes environment variables for context propagation across processes

DevFeed: [OpenTelemetry proposes environment variables for context propagation across processes](<https://devfeed.tech/articles/help-us-stabilize-environment-variable-context-propagation-32571.md>)

Original publisher: [Read original article](<https://opentelemetry.io/blog/2026/environment-variable-context-propagation/>)

Author: OpenTelemetry Authors; Docs CC BY

Published: 2026-09-11T11:01:22Z

Content type: article

Language: en

Sources: [Blog on OpenTelemetry](<https://devfeed.tech/sources/blog-on-opentelemetry.md>)

Topics: [context](<https://devfeed.tech/topics/context.md>), [tracing](<https://devfeed.tech/topics/tracing.md>), [OpenTelemetry](<https://devfeed.tech/topics/opentelemetry.md>), [Processes](<https://devfeed.tech/topics/processes.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [data-processing](<https://devfeed.tech/topics/data-processing.md>)

Tags: [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [data-processing](<https://devfeed.tech/tags/data-processing.md>), [environment-variables](<https://devfeed.tech/tags/environment-variables.md>), [opentelemetry](<https://devfeed.tech/tags/opentelemetry.md>), [processes](<https://devfeed.tech/tags/processes.md>), [spans](<https://devfeed.tech/tags/spans.md>), [tracing](<https://devfeed.tech/tags/tracing.md>), [w3c](<https://devfeed.tech/tags/w3c.md>)

### AI overview

The OpenTelemetry Specification has a release candidate for using environment variables to carry trace context and baggage between processes. The article explains how this can connect spans across workflow runners, shells, build tools, test processes, and similar workloads when protocol headers or message metadata are unavailable, and requests feedback before the specification becomes Stable.

### Source excerpt

A trace does not always cross a network boundary. A workflow runner starts a shell, the shell launches a build tool, and the build tool starts test processes. Batch and data-processing systems create similar chains of child processes. Without a shared way to pass trace information across these boundaries, spans from each process can end up in separate traces. If context propagation is new to you, it is the mechanism that carries information from one service or process to the next. For tracing, this includes the trace and span identifiers that let new spans join the same trace. It can also carry baggage: application-defined key-value pairs that are passed to downstream work.

## Ebb, Meet Flow: Intrinsic Design in a Nutshell

DevFeed: [Ebb, Meet Flow: Intrinsic Design in a Nutshell](<https://devfeed.tech/articles/ebb-meet-flow-intrinsic-design-in-a-nutshell-40788.md>)

Original publisher: [Read original article](<https://zeldman.com/2026/08/18/ebb-meet-flow-intrinsic-design-in-a-nutshell/>)

Author: L. Jeffrey Zeldman

Published: 2026-08-18T17:24:50Z

Content type: opinion

Language: en

Sources: [Jeffrey Zeldman](<https://devfeed.tech/sources/jeffrey-zeldman.md>)

Topics: [Responsive Design](<https://devfeed.tech/topics/responsive-design.md>), [web design](<https://devfeed.tech/topics/web-design.md>), [Front end](<https://devfeed.tech/topics/frontend.md>), [web-standards](<https://devfeed.tech/topics/web-standards.md>)

Tags: [authoring](<https://devfeed.tech/tags/authoring.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [css](<https://devfeed.tech/tags/css.md>), [design](<https://devfeed.tech/tags/design.md>), [essentials](<https://devfeed.tech/tags/essentials.md>), [responsive](<https://devfeed.tech/tags/responsive.md>), [responsive-design](<https://devfeed.tech/tags/responsive-design.md>), [responsive-web-design](<https://devfeed.tech/tags/responsive-web-design.md>), [rwd](<https://devfeed.tech/tags/rwd.md>), [standards](<https://devfeed.tech/tags/standards.md>), [state-of-the-web](<https://devfeed.tech/tags/state-of-the-web.md>), [the-essentials](<https://devfeed.tech/tags/the-essentials.md>), [the-profession](<https://devfeed.tech/tags/the-profession.md>), [type](<https://devfeed.tech/tags/type.md>), [typography](<https://devfeed.tech/tags/typography.md>), [usability](<https://devfeed.tech/tags/usability.md>), [user-experience](<https://devfeed.tech/tags/user-experience.md>), [ux](<https://devfeed.tech/tags/ux.md>), [w3c](<https://devfeed.tech/tags/w3c.md>), [web-design](<https://devfeed.tech/tags/web-design.md>), [web-design-history](<https://devfeed.tech/tags/web-design-history.md>), [web-standards](<https://devfeed.tech/tags/web-standards.md>), [webdesign](<https://devfeed.tech/tags/webdesign.md>), [webtype](<https://devfeed.tech/tags/webtype.md>)

### AI overview

This article explains intrinsic or fluid responsive design: define type scales for small and large screens, then let the browser interpolate between them according to viewport width. It connects the approach to earlier ideas about designing for the web's natural ebb and flow and to the development of Responsive Web Design through improved web standards and browser support.

### Source excerpt

In 2020, the gifted makers of websites at Clearleft shared methods to achieve fluid responsive design. "Utopian" web design was (and still is) their half-kidding name for this approach, which Apple's Jen Simmons, working indendently, called "intrinsic design." Instead of chasing an ever-changing number of fixed breakpoints, utopian or intrinsic design follows the web's intrinsic [...] The post Ebb, Meet Flow: Intrinsic Design in a Nutshell appeared first on Jeffrey Zeldman Presents.

## RFC 9998: Report from the IAB/W3C Workshop on Age-Based Restrictions on Content Access

DevFeed: [RFC 9998: Report from the IAB/W3C Workshop on Age-Based Restrictions on Content Access](<https://devfeed.tech/articles/rfc-9998-report-from-the-iab-w3c-workshop-on-age-based-restrictions-on-content-access-41822.md>)

Original publisher: [Read original article](<https://www.bortzmeyer.org/9998.html>)

Published: 2026-07-03T00:00:00Z

Content type: article

Language: fr

Sources: [Blog de Stéphane Bortzmeyer](<https://devfeed.tech/sources/blog-de-stephane-bortzmeyer.md>)

Topics: [Internet](<https://devfeed.tech/topics/internet.md>), [W3C](<https://devfeed.tech/topics/w3c.md>), [Internet Engineering Task Force (IETF)](<https://devfeed.tech/topics/ietf.md>)

Tags: [architecture](<https://devfeed.tech/tags/architecture.md>), [article](<https://devfeed.tech/tags/article.md>), [ietf](<https://devfeed.tech/tags/ietf.md>), [internet](<https://devfeed.tech/tags/internet.md>), [report](<https://devfeed.tech/tags/report.md>), [rfc](<https://devfeed.tech/tags/rfc.md>), [w3c](<https://devfeed.tech/tags/w3c.md>)

### AI overview

This article discusses RFC 9998, the report of an IAB/W3C workshop on age-based restrictions for access to Internet services. It describes the workshop's focus on technical approaches, architecture, privacy, decentralization, and the potential consequences of age-verification systems.

### Source excerpt

En octobre 2025, l'IAB et le W3C ont organisé un atelier (https://datatracker.ietf.org/group/agews/about/) à Londres sur la restriction d'accès à des services Internet en fonction de l'âge. Ce RFC est le compte-rendu de l'atelier. En tant que compte-rendu, il n'exprime donc pas une position officielle de l'IAB.

## You don't need to pick one: how Sentry and OpenTelemetry work together

DevFeed: [You don't need to pick one: how Sentry and OpenTelemetry work together](<https://devfeed.tech/articles/you-don-t-need-to-pick-one-how-sentry-and-opentelemetry-work-together-24110.md>)

Original publisher: [Read original article](<https://blog.sentry.io/sentry-opentelemetry-work-together/>)

Author: Lazar Nikolov

Published: 2026-05-27T00:00:00Z

Content type: tutorial

Language: en

Sources: [Sentry Blog](<https://devfeed.tech/sources/sentry-blog.md>)

Topics: [OpenTelemetry](<https://devfeed.tech/topics/opentelemetry.md>), [telemetry](<https://devfeed.tech/topics/telemetry.md>), [tracing](<https://devfeed.tech/topics/tracing.md>), [Traces](<https://devfeed.tech/topics/traces.md>), [context](<https://devfeed.tech/topics/context.md>), [Instrumentation](<https://devfeed.tech/topics/instrumentation.md>), [React](<https://devfeed.tech/topics/react.md>), [SDKs](<https://devfeed.tech/topics/sdks.md>)

Tags: [frontend](<https://devfeed.tech/tags/frontend.md>), [instrumentation](<https://devfeed.tech/tags/instrumentation.md>), [opentelemetry](<https://devfeed.tech/tags/opentelemetry.md>), [sentry](<https://devfeed.tech/tags/sentry.md>), [telemetry](<https://devfeed.tech/tags/telemetry.md>), [traces](<https://devfeed.tech/tags/traces.md>), [tracing](<https://devfeed.tech/tags/tracing.md>), [w3c](<https://devfeed.tech/tags/w3c.md>)

### AI overview

This article explains how to combine Sentry and OpenTelemetry in a web application. It recommends keeping OpenTelemetry for backend instrumentation, using the Sentry SDK on the frontend for browser context and application features, and exporting backend traces and logs to Sentry through OTLP directly or through an OpenTelemetry Collector. Sentry's OTLP ingest supports traces and logs, but not metrics at the time described.

### Source excerpt

Use Sentry on the frontend, keep OpenTelemetry on the backend, and choose direct OTLP or Collector forwarding for OTLP events.

## What Is ISO/IEC 40500, And Why Is It Important for Web Accessibility?

DevFeed: [What Is ISO/IEC 40500, And Why Is It Important for Web Accessibility?](<https://devfeed.tech/articles/what-is-iso-iec-40500-and-why-is-it-important-for-web-accessibility-36133.md>)

Original publisher: [Read original article](<https://www.boia.org/blog/what-is-iso/iec-40500-and-why-is-it-important-for-web-accessibility>)

Author: Alexa

Published: 2025-09-15T15:45:00Z

Content type: article

Language: en

Sources: [Blog-Main](<https://devfeed.tech/sources/blog-main.md>)

Topics: [Web Accessibility (a11y)](<https://devfeed.tech/topics/web-accessibility.md>), [Web Content Accessibility Guidelines](<https://devfeed.tech/topics/web-content-accessibility-guidelines.md>), [Accessibility](<https://devfeed.tech/topics/accessibility.md>), [digital accessibility](<https://devfeed.tech/topics/digital-accessibility.md>), [W3C](<https://devfeed.tech/topics/w3c.md>)

Tags: [accessibility](<https://devfeed.tech/tags/accessibility.md>), [accessibility-compliance](<https://devfeed.tech/tags/accessibility-compliance.md>), [accessibility-guidelines](<https://devfeed.tech/tags/accessibility-guidelines.md>), [accessibility-requirements](<https://devfeed.tech/tags/accessibility-requirements.md>), [standard](<https://devfeed.tech/tags/standard.md>), [w3c](<https://devfeed.tech/tags/w3c.md>), [wcag](<https://devfeed.tech/tags/wcag.md>), [web-accessibility](<https://devfeed.tech/tags/web-accessibility.md>), [web-content-accessibility-guidelines](<https://devfeed.tech/tags/web-content-accessibility-guidelines.md>)

### AI overview

This article explains that ISO/IEC 40500 is identical to WCAG 2.0 and discusses why adopting WCAG as an ISO/IEC standard can simplify accessibility compliance. It also describes how ISO recognition may increase awareness of digital accessibility among governments, businesses, and lawmakers.

### Source excerpt

ISO/IEC 40500 is the standard for digital accessibility under the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It's identical to the Web Content Accessibility Guidelines (WCAG) version 2.0.

## Third-Party Cookies, Single Sign-On, and the Limits of Browser Privacy Interventions

DevFeed: [Third-Party Cookies, Single Sign-On, and the Limits of Browser Privacy Interventions](<https://devfeed.tech/articles/misfire-26543.md>)

Original publisher: [Read original article](<https://infrequently.org/2024/07/misfire/>)

Author: Alex Russell

Published: 2024-07-30T00:00:00Z

Content type: opinion

Language: en

Sources: [Alex Russell](<https://devfeed.tech/sources/alex-russell.md>)

Topics: [Cookies](<https://devfeed.tech/topics/cookies.md>), [Web](<https://devfeed.tech/topics/web.md>), [Single sign-on (SSO)](<https://devfeed.tech/topics/sso.md>), [W3C](<https://devfeed.tech/topics/w3c.md>), [browsers](<https://devfeed.tech/topics/browsers.md>), [Google](<https://devfeed.tech/topics/google.md>)

Tags: [browsers](<https://devfeed.tech/tags/browsers.md>), [cookies](<https://devfeed.tech/tags/cookies.md>), [google](<https://devfeed.tech/tags/google.md>), [identity](<https://devfeed.tech/tags/identity.md>), [privacy](<https://devfeed.tech/tags/privacy.md>), [sso](<https://devfeed.tech/tags/sso.md>), [w3c](<https://devfeed.tech/tags/w3c.md>), [web](<https://devfeed.tech/tags/web.md>), [webdev](<https://devfeed.tech/tags/webdev.md>)

### AI overview

This commentary critiques the W3C Technical Architecture Group's response to Google's decision not to imminently remove third-party cookies. It argues that the response underplays both the limited benefits of cookie removal and the unresolved effects on Single Sign-On, sign-in flows, advertising, and user tracking.

### Source excerpt

The W3C Technical Architecture Group1 is out with a blog post and an updated Finding regarding Google's recent announcement that it will not be imminently removing third-party cookies. The current TAG members are competent technologists who have a long history of nuanced advice that looks past the shouting to get at the technical bedrock of complex situations. The TAG also plays a uniquely helpful role in boiling down the guidance it issues into actionable principles that developers can easily follow. All of which makes these pronouncements seem like weak tea. To grok why, we need to walk through the threat model, look at the technology options, and try to understand the limits of technical interventions. Contents Unmasking The Problem Fire And Movement Finding A Way Forward But before that, I should stipulate my personal position on third-party cookies: they aren't great! They should be removed from browsers when replacements are good and ready, and Google's climbdown isn't helpful. That said, we have seen nothing of the hinted-at alternatives, so the jury's out on what the impact will be in practice.2 So why am I dissapointed in the TAG, given that my position is essentially what they wrote? Because it failed to acknowledge the limited and contingent upside of removing third-party cookies, or the thorny issues we're left with after they're gone. Unmasking The Problem So, what do third-party cookies do? And how do they relate to the privacy theat model? Like a lot of web technology, third-party cookies have both positive and negative uses. Owing to a historcal lack of platform-level identity APIs, they form the backbone of nearly every large Single Sign-On (SSO) system. Thankfully, replacements have been developed and are being iterated on. Unfortunately, some browsers have unilaterally removed them without developing such replacements, disrupting sign-in flows across the web, harming users and pushing businesses toward native mobile apps. That's bad, as native app

## Aria-Label is Not Always the Answer

DevFeed: [Aria-Label is Not Always the Answer](<https://devfeed.tech/articles/aria-label-is-not-always-the-answer-38440.md>)

Original publisher: [Read original article](<https://eevis.codes/blog/2021-11-29/aria-label-is-not-always-the-answer/>)

Author: Eevis Panula

Published: 2023-01-03T08:57:28.550000Z

Content type: tutorial

Language: en

Sources: [Eevis Blog](<https://devfeed.tech/sources/eevis-blog.md>)

Topics: [Accessibility](<https://devfeed.tech/topics/accessibility.md>), [aria](<https://devfeed.tech/topics/aria.md>), [HTML](<https://devfeed.tech/topics/html.md>), [html elements](<https://devfeed.tech/topics/html-elements.md>), [W3C](<https://devfeed.tech/topics/w3c.md>)

Tags: [accessibility](<https://devfeed.tech/tags/accessibility.md>), [accessible](<https://devfeed.tech/tags/accessible.md>), [aria](<https://devfeed.tech/tags/aria.md>), [details](<https://devfeed.tech/tags/details.md>), [html](<https://devfeed.tech/tags/html.md>), [html-elements](<https://devfeed.tech/tags/html-elements.md>), [w3c](<https://devfeed.tech/tags/w3c.md>)

### AI overview

This tutorial explains that aria-label is not universally appropriate or consistently supported across HTML elements. It describes when to use aria-label, when aria-labelledby is preferable, and the element types where aria-label works consistently with assistive technologies.

### Source excerpt

Okay, you've learned about accessibility and that there is sometimes a need to make, for example, the link text more descriptive for screen reader users. You've learned about the aria-label-attribute, and its powers. It's the answer to everything! I'm afraid I have to say that it is not. It doesn't work with all HTML elements. In this blog post, I'll dig a bit deeper into the aria-label-attribute, and its usage and limitations, and options. What Is aria-label? So, let's first talk about the specification and where to use it. W3C Recommendation for Accessible Rich Internet Applications (WAI-ARIA)-document defines aria-label as "a string value that labels the current element." You can use it to provide a recognizable name of the object if there is no visible text on the screen that could be used as the label. If there was, aria-labelledby should be used. The most important thing, and the reason I'm writing this article, is that developers should use it only with the following elements: interactive elements (such as links, buttons, inputs et cetera) Elements that have a landmark role Elements that have an ARIA-widget role img or iframe-elements Source: Short note about aria-label, aria-labelledby and aria-describedby by Léonie Watson. aria-label on these elements works consistently with assistive technologies. The support is inconsistent if you use it with any other tag, such as div or span. More about that in Aria-label and non-supported elements. Let's look into each one of these elements a bit more. Interactive Elements Interactive elements are tags intended for user interaction. It means, for example, button, a (when href-attribute is present), input , details and others. The main idea is that users can interact with them. Elements with Landmark Role Elements can have landmark roles either implicitly or explicitly. Having an implicit role means that some of the HTML elements have roles set to them natively. The explicit role, on the other hand, is set with role-att

## WebAuthn, FIDO2, and CTAP: Concepts and Components of Passwordless Authentication

DevFeed: [WebAuthn, FIDO2, and CTAP: Concepts and Components of Passwordless Authentication](<https://devfeed.tech/articles/learning-fido2-webauthentication-and-ctap-start-here-29958.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/webauthn-explained/>)

Author: sakshyam.shah@goteleport.com (Sakshyam Shah)

Published: 2022-07-07T00:00:00Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [WebAuthn](<https://devfeed.tech/topics/webauthn.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [public key](<https://devfeed.tech/topics/public-key.md>), [browsers](<https://devfeed.tech/topics/browsers.md>), [Security](<https://devfeed.tech/topics/security.md>), [W3C](<https://devfeed.tech/topics/w3c.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [browsers](<https://devfeed.tech/tags/browsers.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [public-key](<https://devfeed.tech/tags/public-key.md>), [security](<https://devfeed.tech/tags/security.md>), [w3c](<https://devfeed.tech/tags/w3c.md>), [web](<https://devfeed.tech/tags/web.md>)

### AI overview

This tutorial explains WebAuthn as a public-key authentication API for web browsers. It introduces the relationship between WebAuthn, FIDO2, the W3C specification, and CTAP, and describes the components required for passwordless authentication.

### Source excerpt

This post introduces basic concepts and details related to WebAuthn.

## 2019 in Review

DevFeed: [2019 in Review](<https://devfeed.tech/articles/2019-in-review-28730.md>)

Original publisher: [Read original article](<https://una.im/2019-in-review/>)

Published: 2020-01-10T00:00:00Z

Content type: opinion

Language: en

Sources: [Una Kravets](<https://devfeed.tech/sources/una-kravets.md>)

Topics: [Development](<https://devfeed.tech/topics/development.md>), [Front end](<https://devfeed.tech/topics/frontend.md>), [Google](<https://devfeed.tech/topics/google.md>), [CSS](<https://devfeed.tech/topics/css.md>), [Material Design](<https://devfeed.tech/topics/material-design.md>), [W3C](<https://devfeed.tech/topics/w3c.md>), [color](<https://devfeed.tech/topics/color.md>)

Tags: [color](<https://devfeed.tech/tags/color.md>), [css](<https://devfeed.tech/tags/css.md>), [developer](<https://devfeed.tech/tags/developer.md>), [front-end-development](<https://devfeed.tech/tags/front-end-development.md>), [google](<https://devfeed.tech/tags/google.md>), [material-design](<https://devfeed.tech/tags/material-design.md>), [retrospective](<https://devfeed.tech/tags/retrospective.md>), [w3c](<https://devfeed.tech/tags/w3c.md>), [year-in-review](<https://devfeed.tech/tags/year-in-review.md>)

### AI overview

A personal retrospective covering 2019 travel, work, projects, content production, and professional contributions. The author discusses joining Google as a Developer Advocate for Material Design, producing podcasts and web series, publishing front-end development content, contributing to the W3C CSS Working Group, and launching CSS Houdini and Material-related projects.

### Source excerpt

2019 was a massive year for me. I like to reflect on the year and set some goals for the future.

## Quick Threat Model Links October 2019

DevFeed: [Quick Threat Model Links October 2019](<https://devfeed.tech/articles/quick-threat-model-links-october-2019-36947.md>)

Original publisher: [Read original article](<https://shostack.org/blog/quick-threat-modeling-links-october-2019/>)

Author: Adam

Published: 2019-10-09T00:00:00Z

Content type: article

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [W3C](<https://devfeed.tech/topics/w3c.md>), [Web](<https://devfeed.tech/topics/web.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [security](<https://devfeed.tech/tags/security.md>), [w3c](<https://devfeed.tech/tags/w3c.md>), [web](<https://devfeed.tech/tags/web.md>)

### AI overview

A roundup of threat-modeling resources published in October 2019, covering Kubernetes, serverless functions, managed attribution, web feature development, and medical devices. It also notes that some linked resources are no longer available and discloses advisory-board relationships with Continuum and Ntrepid.

### Source excerpt

Just a few things for now

## Keycloak Community Newsletter #1

DevFeed: [Keycloak Community Newsletter #1](<https://devfeed.tech/articles/keycloak-community-newsletter-1-31576.md>)

Original publisher: [Read original article](<https://www.keycloak.org/2019/04/keycloak-newsletter-1>)

Author: Sébastien Blanc

Published: 2019-04-01T00:00:00Z

Content type: news

Language: en

Sources: [Keycloak Blog](<https://devfeed.tech/sources/keycloak-blog.md>)

Topics: [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [WebAuthn](<https://devfeed.tech/topics/webauthn.md>), [W3C](<https://devfeed.tech/topics/w3c.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [announcement](<https://devfeed.tech/tags/announcement.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [github](<https://devfeed.tech/tags/github.md>), [github-issues](<https://devfeed.tech/tags/github-issues.md>), [idm](<https://devfeed.tech/tags/idm.md>), [jwt](<https://devfeed.tech/tags/jwt.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [new-feature](<https://devfeed.tech/tags/new-feature.md>), [news](<https://devfeed.tech/tags/news.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [pull-requests](<https://devfeed.tech/tags/pull-requests.md>), [saml](<https://devfeed.tech/tags/saml.md>), [sso](<https://devfeed.tech/tags/sso.md>), [w3c](<https://devfeed.tech/tags/w3c.md>), [web-authentication](<https://devfeed.tech/tags/web-authentication.md>)

### AI overview

The first Keycloak Community Newsletter reviews community articles on JWT authentication with React, NodeJS, Kong, Kibana, and Kubernetes. It also covers Keycloak releases, planned feature design discussions, WebAuthn becoming a W3C Standard, conference talks, and opportunities to contribute.

### Source excerpt

This is the very first "Keycloak Community Newsletter." The goal of this newsletter is to share news about the Keycloak project. News from the community Since the beginning of the year, the community has been really active. Each week several blog posts about Keycloak are published. Here is a short selection. Let's start with Philip Riecks who explains in this article how you can use Microprofile JWT Authentication with Keycloak and React. Ramandeep Singh has been blogging about Keycloak and NodeJS. Joshua Alfred Erney explains in this blog series how to integrate Keycloak and Kong, a popular API management platform. With Mohamed Aboullaite's blog post, you will learn how to secure your Kibana dashboards using Keycloak. Finally in this three-part article, the process of installing Keycloak on Kubernetes will become very clear. News from the project Keycloak 5.0.0 has been released and 6.0.0 is around the corner. From now on, new larger Keycloak's features will be openly discussed. For each new feature, a design document will be created and pushed to our Github repository as a simple MarkDown file. This strategy makes it easy for everyone to comment as well as contribute to the designs by opening Github issues and providing pull requests. We have already three documents open for discussion: W3C Web Authentication - Two-Factor Application-Initiated Actions Observerability News from the Identity Management World The big announcement, two weeks ago, was that WebAuthn became an official W3C Standard. This event is a milestone in the world of authentication and Identity Management. The goal of WebAuthn, according to Wikipedia is to: standardize an interface for public-key authentication of users to web-based applications and services. The Keycloak community is naturally really interested in this new standard. A design document is available and the community has even started to work on a prototype. Conferences / Webinars In March, the Javaland conference was held in Germany

## W3C Web Authentication (WebAuthn)

DevFeed: [W3C Web Authentication (WebAuthn)](<https://devfeed.tech/articles/w3c-web-authentication-webauthn-31575.md>)

Original publisher: [Read original article](<https://www.keycloak.org/2019/03/web-authn>)

Author: Stian Thorgersen

Published: 2019-03-06T00:00:00Z

Content type: article

Language: en

Sources: [Keycloak Blog](<https://devfeed.tech/sources/keycloak-blog.md>)

Topics: [WebAuthn](<https://devfeed.tech/topics/webauthn.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [public key](<https://devfeed.tech/topics/public-key.md>), [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [browser](<https://devfeed.tech/topics/browser.md>), [Java](<https://devfeed.tech/topics/java.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [idm](<https://devfeed.tech/tags/idm.md>), [java](<https://devfeed.tech/tags/java.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [public-key](<https://devfeed.tech/tags/public-key.md>), [saml](<https://devfeed.tech/tags/saml.md>), [security](<https://devfeed.tech/tags/security.md>), [sso](<https://devfeed.tech/tags/sso.md>), [w3c](<https://devfeed.tech/tags/w3c.md>), [web-authentication](<https://devfeed.tech/tags/web-authentication.md>)

### AI overview

The article explains that WebAuthn became an official W3C web standard and describes its use of public-key credentials instead of shared secrets. It covers phishing resistance, browser and device support, two-factor and passwordless authentication, and planned WebAuthn integration in Keycloak.

### Source excerpt

W3C Web Authentication (WebAuthn) was recently made an official web standard. This is a great step towards making a safer and simpler authentication experience for users. Where traditional authentication, such as password and OTP, rely on having shared secrets between the user and the web application, this is not the case with WebAuthn. WebAuthn uses public key-based credentials resulting in the web application not having access to the users secrets anymore. The keys are also unique per web application which eliminates the risk of phishing attacks. WebAuthn provides a standard protocol for web applications to authenticate via a number of devices through a relatively simple challenge/response. All major browser vendors now have support for WebAuthn and FIDO2, where FIDO2 is the specification that enables the browser to communicate with different hardware devices. WebAuthn can be used both as a two factor mechanism as well as enable passwordless authentication. There are already an healthy amount of devices that can be used together with WebAuthn. There are a number of security keys like YubiKey, ThinC and Titan. A lot of new laptops also come with built-in fingerprint scanners, and it Android also recently made it possible to use the fingerprint scanners on Android 7+ devices with WebAuthn. We are of course planning on bringing WebAuthn support to Keycloak in the near future. The team behind webauthn4j has been hard at work greating a quality Java library for WebAuthn and will hopefully soon have an extension to Keycloak ready. We will first focus on two-factor authentication with WebAuth and as part of this we will bring a number of improvements to Keycloak around two-factor authentication. For more details check the design document. Later, we will also bring the passwordless experience to Keycloak. This will also introduce Keycloak to the identity first login flows. By asking for the users identity first Keycloak can provide smarter decisions on how to authenticate

## Shaping the Future of Payments in the Browser

DevFeed: [Shaping the Future of Payments in the Browser](<https://devfeed.tech/articles/shaping-the-future-of-payments-in-the-browser-1573.md>)

Original publisher: [Read original article](<https://shopify.engineering/shaping-the-future-of-payments-in-the-browser>)

Author: Krystian Czesak

Published: 2018-09-04T19:32:00Z

Content type: article

Language: en

Sources: [Shopify Engineering](<https://devfeed.tech/sources/shopify-engineering.md>), [Shopify Engineering - Shopify Engineering](<https://devfeed.tech/sources/shopify-engineering-shopify-engineering.md>)

Topics: [API](<https://devfeed.tech/topics/api.md>), [browser](<https://devfeed.tech/topics/browser.md>), [Shopify](<https://devfeed.tech/topics/shopify.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Chrome](<https://devfeed.tech/topics/chrome.md>), [Web](<https://devfeed.tech/topics/web.md>), [modern web development](<https://devfeed.tech/topics/modern-web-development.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [browser](<https://devfeed.tech/tags/browser.md>), [checkout](<https://devfeed.tech/tags/checkout.md>), [chrome](<https://devfeed.tech/tags/chrome.md>), [community](<https://devfeed.tech/tags/community.md>), [contribute](<https://devfeed.tech/tags/contribute.md>), [data](<https://devfeed.tech/tags/data.md>), [experimentation](<https://devfeed.tech/tags/experimentation.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [payments](<https://devfeed.tech/tags/payments.md>), [shopify](<https://devfeed.tech/tags/shopify.md>), [w3c](<https://devfeed.tech/tags/w3c.md>)

### AI overview

Shopify describes an experiment evaluating the Payment Request API, a JavaScript API for native browser payments that simplifies checkout forms and the checkout experience. The article explains Shopify's participation in the W3C Web Payments Working Group and defines success metrics for assessing whether Payment Request is market ready, including checkout completion rate and a faster, better purchase experience.

### Source excerpt

At Shopify, the leading multi-channel commerce platform that powers over 600,000 businesses in approximately 175 countries, we aim at making commerce better for everyone. This sometimes means investing in new technologies and giving back what we learned to the community, especially if it's a technology we think will

## Statement Objecting To EME as a W3C Recommendation

DevFeed: [Statement Objecting To EME as a W3C Recommendation](<https://devfeed.tech/articles/statement-objecting-to-eme-as-a-w3c-recommendation-16809.md>)

Original publisher: [Read original article](<https://blog.ethereum.org/en/2017/08/21/statement-objecting-w3c-publishing-eme-recommendation>)

Author: James Pitts

Published: 2017-08-21T15:59:58Z

Content type: opinion

Language: en

Sources: [Ethereum Foundation Blog](<https://devfeed.tech/sources/ethereum-foundation-blog.md>)

Topics: [Ethereum](<https://devfeed.tech/topics/ethereum.md>), [Web](<https://devfeed.tech/topics/web.md>), [Accessibility](<https://devfeed.tech/topics/accessibility.md>), [Security](<https://devfeed.tech/topics/security.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [accessibility](<https://devfeed.tech/tags/accessibility.md>), [ethereum](<https://devfeed.tech/tags/ethereum.md>), [organizational](<https://devfeed.tech/tags/organizational.md>), [security](<https://devfeed.tech/tags/security.md>), [standards](<https://devfeed.tech/tags/standards.md>), [statement](<https://devfeed.tech/tags/statement.md>), [w3c](<https://devfeed.tech/tags/w3c.md>)

### AI overview

The Ethereum Foundation publishes its formal objection to the W3C's proposed Encrypted Media Extensions recommendation. It argues that EME and the Content Decryption Module implementations it enables could reduce accessibility, limit internet freedom, undermine security research, and weaken trust among users and developers.

### Source excerpt

The Foundation believes Encrypted Media Extensions (EME) should not be published as a W3C Recommendation, and we are now making public the formal objection the Ethereum Foundation submitted to the W3C opposing the recommendation of EME. As a member of the W3C, the Ethereum Foundation contributes to the standards-making process and...

## Understanding WebDriver, Selenium, Marionette, and Browser Automation

DevFeed: [Understanding WebDriver, Selenium, Marionette, and Browser Automation](<https://devfeed.tech/articles/untangling-webdriver-and-the-browser-automation-landscape-i-live-in-20304.md>)

Original publisher: [Read original article](<https://www.erranderr.com/blog/webdriver-ontology.html>)

Author: Maja Frydrychowicz

Published: 2016-07-12T04:00:00Z

Content type: article

Language: en

Sources: [Mozilla Automation](<https://devfeed.tech/sources/mozilla-automation.md>)

Topics: [webDriver](<https://devfeed.tech/topics/webdriver.md>), [Browser Automation](<https://devfeed.tech/topics/browser-automation.md>), [Selenium](<https://devfeed.tech/topics/selenium.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [Firefox](<https://devfeed.tech/topics/firefox.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [JSON](<https://devfeed.tech/topics/json.md>), [Mozilla](<https://devfeed.tech/topics/mozilla.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [automation](<https://devfeed.tech/tags/automation.md>), [browser](<https://devfeed.tech/tags/browser.md>), [browser-ui](<https://devfeed.tech/tags/browser-ui.md>), [browsers](<https://devfeed.tech/tags/browsers.md>), [client-driver](<https://devfeed.tech/tags/client-driver.md>), [firefox](<https://devfeed.tech/tags/firefox.md>), [foss](<https://devfeed.tech/tags/foss.md>), [geckodriver](<https://devfeed.tech/tags/geckodriver.md>), [harness](<https://devfeed.tech/tags/harness.md>), [http](<https://devfeed.tech/tags/http.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [json](<https://devfeed.tech/tags/json.md>), [marionette](<https://devfeed.tech/tags/marionette.md>), [mozilla](<https://devfeed.tech/tags/mozilla.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [payload](<https://devfeed.tech/tags/payload.md>), [request](<https://devfeed.tech/tags/request.md>), [responses](<https://devfeed.tech/tags/responses.md>), [selenium](<https://devfeed.tech/tags/selenium.md>), [w3c](<https://devfeed.tech/tags/w3c.md>), [web](<https://devfeed.tech/tags/web.md>), [webdriver](<https://devfeed.tech/tags/webdriver.md>)

### AI overview

An explanatory article untangles the terminology around Marionette, Selenium, WebDriver, FirefoxDriver, and geckodriver. It explains the W3C WebDriver Specification and how its browser-agnostic protocol uses JSON over HTTP to send commands and receive responses for browser automation and testing.

### Source excerpt

I define WebDriver, W3C WebDriver, Selenium, geckodriver, FirefoxDriver, Marionette harness/runner/client/driver and more.

## W3C Push API Crash Course

DevFeed: [W3C Push API Crash Course](<https://devfeed.tech/articles/w3c-push-api-crash-course-29160.md>)

Original publisher: [Read original article](<http://tech.zumba.com/2015/05/29/chrome-push-api//>)

Author: Nick Comer (nicholas@zumba.com)

Published: 2015-05-29T00:00:00Z

Content type: tutorial

Language: en

Sources: [Zumba](<https://devfeed.tech/sources/zumba.md>)

Topics: [Chrome](<https://devfeed.tech/topics/chrome.md>), [notifications](<https://devfeed.tech/topics/notifications.md>), [W3C](<https://devfeed.tech/topics/w3c.md>), [Google Chrome](<https://devfeed.tech/topics/google-chrome.md>), [API](<https://devfeed.tech/topics/api.md>), [Google](<https://devfeed.tech/topics/google.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [chrome](<https://devfeed.tech/tags/chrome.md>), [google-chrome](<https://devfeed.tech/tags/google-chrome.md>), [notifications](<https://devfeed.tech/tags/notifications.md>), [push-notifications](<https://devfeed.tech/tags/push-notifications.md>), [w3c](<https://devfeed.tech/tags/w3c.md>)

### AI overview

A tutorial introducing push notifications in Google Chrome through the W3C Push API.

### Source excerpt

Getting started with push notifications in Google Chrome

## Media Queries 4 and Responsive Design Beyond Browser Size

DevFeed: [Media Queries 4 and Responsive Design Beyond Browser Size](<https://devfeed.tech/articles/media-queries-of-the-future-28814.md>)

Original publisher: [Read original article](<https://una.im/media-queries-of-the-future/>)

Published: 2014-10-16T00:00:00Z

Content type: article

Language: en

Sources: [Una Kravets](<https://devfeed.tech/sources/una-kravets.md>)

Topics: [Media Queries](<https://devfeed.tech/topics/media-queries.md>), [Responsive Design](<https://devfeed.tech/topics/responsive-design.md>), [web design](<https://devfeed.tech/topics/web-design.md>), [W3C](<https://devfeed.tech/topics/w3c.md>), [browser](<https://devfeed.tech/topics/browser.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [deprecated](<https://devfeed.tech/tags/deprecated.md>), [design](<https://devfeed.tech/tags/design.md>), [responsive-design](<https://devfeed.tech/tags/responsive-design.md>), [w3c](<https://devfeed.tech/tags/w3c.md>), [web](<https://devfeed.tech/tags/web.md>)

### AI overview

This article reviews media query capabilities, including media types and expressions for different devices, and argues that responsive design can account for factors beyond browser size, such as location, weather, and lighting.

### Source excerpt

The Media Queries 4 spec brings insight to technological capabilities that are coming up soon (this is based on the Editor's Draft, October 10, 2014).

## Target Joins the W3C

DevFeed: [Target Joins the W3C](<https://devfeed.tech/articles/target-joins-the-w3c-20412.md>)

Original publisher: [Read original article](<https://target.github.io/standards/target-joins-w3c>)

Author: Target Brands, Inc

Published: 2014-10-15T05:00:00Z

Content type: release

Language: en

Sources: [Target](<https://devfeed.tech/sources/target.md>)

Topics: [Web](<https://devfeed.tech/topics/web.md>), [Internet of things](<https://devfeed.tech/topics/iot.md>), [Internet](<https://devfeed.tech/topics/internet.md>), [coding-community](<https://devfeed.tech/topics/coding-community.md>)

Tags: [internet-of-things](<https://devfeed.tech/tags/internet-of-things.md>), [location-based](<https://devfeed.tech/tags/location-based.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [standards](<https://devfeed.tech/tags/standards.md>), [w3c](<https://devfeed.tech/tags/w3c.md>), [web](<https://devfeed.tech/tags/web.md>), [web-services](<https://devfeed.tech/tags/web-services.md>)

### AI overview

Target announced its membership in the World Wide Web Consortium (W3C) and described plans to collaborate on web services, location-based content distribution, and the Internet of Things for retail-related technology.

### Source excerpt

Tuesday, October 14th 2015, Target affirmed its commitment to technology and leadership in the retail space by joining the World Wide Web Consortium (W3C). As a company that cares about delivering great experiences for customers, we realize those experiences are now steeped in technology. One way Target can have a significant impact on shaping technology is open engagement with other companies and organizations at the heart of emerging development - the W3C enables us to do just that. So you joined - now what? There are so many areas of technology important to retail and associated businesses. Initially, we're interested in engaging with tech leaders, businesses, and organizations on web services, location-based content distribution (iBeacons, smart stores, etc.), and the Internet of Things. Through open dialogue and collaborative work in the W3C, we seek to push these areas of technology forward to enable new and better experiences for our customers. More to come soon! This is just the beginning. As an organization we will be engaging with the developer community in new and different ways, proposing ideas on the technologies that matter to us, and providing feedback of our progress. Now let's get to work! Target Joins the W3C was originally published by Target Brands, Inc at target tech on October 15, 2014.

## Introducing HTML Inspector

DevFeed: [Introducing HTML Inspector](<https://devfeed.tech/articles/introducing-html-inspector-29511.md>)

Original publisher: [Read original article](<https://philipwalton.com/articles/introducing-html-inspector/>)

Published: 2013-06-11T15:22:52Z

Content type: tutorial

Language: en

Sources: [Philip Walton](<https://devfeed.tech/sources/philip-walton.md>)

Topics: [HTML](<https://devfeed.tech/topics/html.md>), [Code quality](<https://devfeed.tech/topics/code-quality.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [browser](<https://devfeed.tech/topics/browser.md>), [Document Object Model (DOM)](<https://devfeed.tech/topics/dom.md>), [W3C](<https://devfeed.tech/topics/w3c.md>), [jQuery](<https://devfeed.tech/topics/jquery.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [code-quality](<https://devfeed.tech/tags/code-quality.md>), [html](<https://devfeed.tech/tags/html.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [testing](<https://devfeed.tech/tags/testing.md>), [w3c](<https://devfeed.tech/tags/w3c.md>)

### AI overview

The article introduces HTML Inspector, a customizable and extensible JavaScript tool that runs in the browser to check HTML markup. It explains how the tool traverses the DOM, applies rules, reports errors, and differs from the stricter, non-extensible W3C Validator.

### Source excerpt

HTML Inspector is a code quality tool to help you and your team write better markup. It's written in JavaScript and runs in the browser, so testing your HTML has never been easier.