@valorin

Indeed a few years old: https://w3c.github.io/webappsec-change-password-url/

But the W3C Working Draft is just a few months old: https://www.w3.org/TR/change-password-url/