W3C Publishes First Public Working Draft for WebAuthn Passkey Endpoints
On August 21, 2025, the Web Application Security Working Group at the World Wide Web Consortium (W3C) released the First Public Working Draft of A Well-Known URL for Relying Party Passkey Endpoints . This new specification introduces a standardized approach to improve the discoverability of passkey creation and management endpoints for WebAuthn Relying Parties (RPs). By defining a well-known URL, this draft aims to streamline how WebAuthn clients and authenticators interact with services supporting passkeys, enhancing both security and user experience on the web. In this blog post, we’ll explore the significance of this draft, its implications for web security, and what it means for developers, organizations, and end-users. What Are Passkeys and WebAuthn? Before diving into the specification, let’s clarify some key terms. WebAuthn (Web Authentication) is a W3C standard that enables strong, passwordless authentication using public-key cryptography. It allows users to authenticate with ...