WebAuthn (W3C Web Authentication Level 3)

1. Introduction and use cases

   Registration and authentication ceremonies and the relying party model.

2. Web Authentication API

   PublicKeyCredential, creation and request options, AuthenticatorResponse.

3. Authenticator model

   Authenticator operations, credential storage and user verification.

4. Authenticator data

   rpIdHash, flags, signCount and attested credential data.

5. Attestation

   Attestation statements, formats and types.

6. Registering a new credential

   RP steps to verify a registration response.

7. Verifying an authentication assertion

   RP steps to verify signature, origin and sign counter.

8. Extensions

   Extension framework, e.g. credProps, largeBlob and prf.

9. Security considerations

   Phishing resistance, credential loss and backup eligibility.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.