20:00:41 RRSAgent has joined #waf 20:00:41 logging to http://www.w3.org/2008/01/23-waf-irc 20:00:43 RRSAgent, make logs member 20:00:43 Zakim has joined #waf 20:00:45 Zakim, this will be WAF 20:00:45 ok, trackbot-ng; I see IA_WAF()3:00PM scheduled to start now 20:00:46 Meeting: Web Application Formats Working Group Teleconference 20:00:46 Date: 23 January 2008 20:01:00 tlr has changed the topic to: http://lists.w3.org/Archives/Public/public-appformats/2008Jan/0223.html 20:01:02 Agenda: http://lists.w3.org/Archives/Public/public-appformats/2008Jan/0223.html 20:02:30 IA_WAF()3:00PM has now started 20:02:37 +[Mozilla] 20:02:39 +Thomas 20:02:41 +Dave_Orchard 20:02:41 sicking has joined #waf 20:03:14 + +1.781.993.aaaa 20:03:22 zakim, aaaa is ArtB 20:03:22 +ArtB; got it 20:03:23 Zakim, mozilla is me 20:03:23 +sicking; got it 20:03:25 Chair: ArtB 20:03:32 Meeting: WAF WG Voice Conference 20:04:17 Art has joined #waf 20:06:00 i don't have better equipment than last time so i'll prolly have to be muted all the time... 20:06:07 Zakim, passcode? 20:06:07 the conference code is 9231 (tel:+1.617.761.6200 tel:+33.4.89.06.34.99 tel:+44.117.370.6152), anne 20:06:57 Agenda: http://lists.w3.org/Archives/Public/public-appformats/2008Jan/0223.html 20:07:04 +anne 20:07:19 Present: Art, Anne, Dave, Jonas, Thomas 20:07:25 Scribe: Art 20:07:31 ScribeNick: ArtB 20:07:36 Topic: Review Agenda 20:07:53 Zakim, mute me 20:07:53 anne should now be muted 20:08:17 zakim, mute Dave_Orchard 20:08:17 Dave_Orchard should now be muted 20:08:22 zakim, unmute Dave_Orchard 20:08:22 Dave_Orchard should no longer be muted 20:08:26 zakim, unmute Mozilla 20:08:26 sorry, tlr, I do not know which phone connection belongs to Mozilla 20:08:30 zakim, mute me 20:08:30 ArtB should now be muted 20:08:31 zakim, unmute sicking 20:08:32 sicking was not muted, tlr 20:08:34 zakim, mute me 20:08:34 Thomas should now be muted 20:08:36 zakim, mute sicking 20:08:36 sicking should now be muted 20:08:44 zakim, who is making noise? 20:08:57 tlr, listening for 11 seconds I could not identify any sounds 20:09:06 zakim, unmute art 20:09:06 ArtB should no longer be muted 20:09:11 zakim, unmute thomas 20:09:11 Thomas should no longer be muted 20:09:18 zakim, who is muted? 20:09:18 I see sicking, anne muted 20:09:20 I am, but muted 20:09:24 zakim, unmute sicking 20:09:24 sicking should no longer be muted 20:09:26 zakim, unmute anne 20:09:26 anne should no longer be muted 20:09:28 zakim, mute thomas 20:09:28 Thomas should now be muted 20:09:57 I'm muted, folks, so can't be me if the noise is still there 20:10:02 AB: propose adding the P3P suggestion raised by Mark to the agenda 20:10:04 it's no longer here 20:10:08 oh 20:10:08 AB: is that OK? 20:10:09 because you're muted :) 20:10:10 I hear it quite well 20:10:12 *argh* 20:10:26 AB: it would be the last part of the meeting ~10 mins or so 20:10:32 (there is some other noise to though) 20:10:32 AB: any objections 20:10:43 JS: OK with me 20:11:04 [Chair notes noise probs has caused most people to mute ...] 20:11:35 Topic: Requirements 20:12:03 AB: thanks for submitting the input of requirements Jonas 20:12:17 -Thomas 20:12:24 AB: since then we've comments from Art, Jon, Thomas, probably others regarding those reqs 20:12:36 tlr_ has joined #waf 20:13:29 zakim, call thomas-skype 20:13:29 ok, tlr_; the call is being made 20:13:31 sorry... 20:13:31 +Thomas 20:13:33 zakim, call thomas-skype 20:13:33 ok, tlr_; the call is being made 20:13:35 +Thomas.a 20:13:54 zakim, who is on the phone? 20:13:54 On the phone I see sicking, Dave_Orchard, ArtB, anne, Thomas, Thomas.a (muted) 20:14:01 zakim, drop Thomas.a 20:14:01 Thomas.a is being disconnected 20:14:02 -Thomas.a 20:15:33 AB: open the floor to any major reqs related issues people want to discuss 20:15:53 DO: want to raise the server-side versus client-side PEP 20:16:22 ... my related e-mail gave my position 20:16:29 ... don't think we have consensus on this 20:16:34 ... within the WG 20:16:50 ... but I haven't seen Thomas' latest e-mail 20:17:13 q+ 20:17:17 q+ 20:17:17 ... there has been lots of discussion 20:17:34 ... some people in the WG feel strongly about it 20:17:59 ... I don't think we should close this issue 20:18:08 ... likely to be a formal objection 20:18:20 ... think we need to try to get to consensus 20:18:39 ... I've been dismayed by some of the comments 20:19:07 ... For example "take it to another WG" 20:20:21 -anne 20:20:27 TR: may make sense to talk about the reqs in the context of the Issues 20:20:44 Zakim, passcode? 20:20:44 the conference code is 9231 (tel:+1.617.761.6200 tel:+33.4.89.06.34.99 tel:+44.117.370.6152), anne 20:21:02 Topic: ISSUE #20 - location of the PEP 20:21:10 +anne 20:21:59 q? 20:22:00 AvK: what is the counter-proposal? 20:22:10 ... how do you not involve the client? 20:22:22 Zakim, who is making noice 20:22:22 I don't understand 'who is making noice', sicking 20:22:27 Zakim, who is making noise 20:22:27 I don't understand 'who is making noise', sicking 20:22:29 zakim, mute me 20:22:29 sorry, tlr, I do not know which phone connection belongs to you 20:22:34 ... I've raised these questions on the mail list but haven't gotten any response 20:22:45 zakim, I am thomas 20:22:45 ok, tlr, I now associate you with Thomas 20:22:47 zakim, mute me 20:22:47 Thomas should now be muted 20:22:47 DO: I defer to Tyler and other security folks 20:22:53 zakim, who is making noise? 20:23:03 sicking, listening for 10 seconds I heard sound from the following: sicking (5%), Dave_Orchard (30%), ArtB (4%), anne (29%) 20:23:10 zakim, unmute me 20:23:10 Thomas should no longer be muted 20:23:37 anne, you are causing echo 20:23:41 q? 20:23:46 Zakim, mute me 20:23:46 anne should now be muted 20:23:51 AB: I thought Anne's quest for an alternate proposal was to the whole community not just to Dave 20:24:01 AvK: yes, that's correct 20:24:19 TR: I think we should first look at the reqs 20:25:34 zakim, call thomas-home 20:25:34 ok, tlr; the call is being made 20:25:36 +Thomas 20:25:38 -Dave_Orchard 20:25:57 -Thomas 20:25:59 -anne 20:26:00 Zakim, who is making noise? 20:26:11 anne, listening for 10 seconds I heard sound from the following: ArtB (9%) 20:27:08 dave? 20:27:09 whoa 20:27:10 anne? 20:27:14 Zakim, passcode? 20:27:14 the conference code is 9231 (tel:+1.617.761.6200 tel:+33.4.89.06.34.99 tel:+44.117.370.6152), anne 20:28:30 +anne 20:28:37 dave? 20:28:43 want to rejoin? 20:29:47 AvK: did anyone make a concrete proposal? 20:29:58 TR: Mark and Tyler both made concrete proposals 20:30:30 JS: we certainly put more of the enforcement in the client 20:32:23 TR: one of Mark's proposals should be workable 20:32:58 http://www.w3.org/mid/B8F607CD-811A-44DF-BE58-314C8BB9CAE3@yahoo-inc.com 20:33:13 TR: but it doesn't work with legacy servers 20:33:26 JS: I don't see any way of doing this and still meeting req #4 20:33:46 TR: good point 20:34:43 ... if you wanted to do enforcement on the server side would require a step where client asks the server if it understands the protocol 20:34:57 ... if the server does, then the details could be moved to the server 20:35:13 ... but have to be careful not to break existing services 20:35:25 ... policy lang doesn't have to travel over the wire 20:36:02 AvK: that makes GET requests more complicated 20:36:12 ... have to know if server is capable of replying 20:36:21 ... makes caching on the server harder 20:38:34 JS: I think we need a concrete proposal 20:38:47 ... including the attacks it addresses 20:39:17 AvK: hard to comment on the other proposal when it isn't real concreate 20:39:36 TR: given DO dropped off I think we don't have critical mass to continue this discussion 20:39:40 JS: I agree 20:39:44 tlr has joined #waf 20:40:13 AB: would like to understand the requirements angle 20:40:58 TR: would need some type of discovery mechanism 20:41:09 +Dave_Orchard 20:41:35 ... need to understand the complexity of the server versus the client 20:42:16 ... i.e. where to put the complexity 20:42:53 JS: I don't see it as client side PEP vs. server side PEP because there will need to be policy enforcement on both 20:42:58 TR: I agree 20:43:12 JS: we need 1) coutner proposal; 2) what are the problems to solve 20:43:30 TR: I can create some counter proposals 20:43:37 AB: that would be good 20:44:10 TR: I can come up with 1 or 2 straw man proposals 20:44:39 DO: what about the proposals that Tyler proposed 20:45:45 TR: the question isn't where the PEP resides but how to split the complexity betweent the client and server. The client will not be eliminated from the decision, regardless of the architecture. 20:46:30 ... The only way to eliminate the client completely is to mint a new HTTP method 20:46:51 ... But that would create a huge deployment problem. 20:47:05 ... There will always be some policy enforcement on the client. 20:48:58 ... Can only entirely move the decision to the server if the client is certain the server can do 100% of the policy decision. 20:49:09 [Scribe missed some details ...] 20:49:16 JS: please send this to the mail list 20:49:54 ACTION: Thomas submit proposal to the mail list regarding the policy decision split and complexity 20:49:54 Created ACTION-154 - Submit proposal to the mail list regarding the policy decision split and complexity [on Thomas Roessler - due 2008-01-30]. 20:50:31 JS: we must understand the problems that will be solved by the other proposal 20:50:34 TR: agree 20:50:41 AB: agree 20:51:47 ACTION: Jonas send a request for comments regarding the policy decision questions and issues 20:51:47 Created ACTION-155 - Send a request for comments regarding the policy decision questions and issues [on Jonas Sicking - due 2008-01-30]. 20:53:10 Topic: Requirements 20:53:20 zakim, call thomas-781 20:53:20 ok, tlr; the call is being made 20:53:22 +Thomas 20:53:35 -Thomas 20:54:06 AB: what do we want to discuss? 20:54:13 AvK: prefer to discuss on the mail list 20:54:26 JS: I agree 20:55:27 DO: think we need to discuss requirements 20:55:42 TR: would prefer requirement discussion on the phone 20:55:55 chair's call, I gues 20:57:34 DO: think it's hard to follow some of the detailed discussions related to requirements 21:01:52 AB: what is your plan Anne to address the comments on reqs? 21:02:01 AvK: I will respond on the mail list 21:02:25 AvK: I don't think we should delay the work to get everything documented 21:02:35 DO: but we don't have agreement with what is documented 21:02:47 AvK: if someone disagrees, they need to submit comments 21:02:56 TR: we don't have agreements 21:03:25 ... we need to go through the requirements and discuss them 21:04:26 Topic: Requirement #1 21:05:53 AB: who is going to drive this? 21:06:01 JS: I responded to Jon just now 21:07:07 TR: I don't have much to add to beyond what I said on the mail list 21:08:04 ... may be able to merge 13 with #1.d 21:09:06 JS: It would be good if comments included proposed changes 21:12:57 AB: any other questions about TR's comments? 21:13:02 AvK: I haven't read it yet 21:13:06 JS: me neither 21:13:38 AvK: could someone give me some ABNF help? 21:13:43 DO: I can help. 21:13:50 AvK: thanks! 21:15:01 AvK: it would be good if there was a proposal for specific reqs before the call. 21:15:12 AB: any issues with that? 21:15:14 JS: no 21:15:23 AB: sounds reasonable to me 21:16:13 TR: Art should solicit input on specific reqs and add them to the agenda 21:16:21 AB: I'm OK with that 21:17:14 DO: one thing we can do is to pick a couple of issues that we want to get closure and give ~ 1 week notice. 21:17:20 AB: good idea Dave 21:18:31 tlr_ has joined #waf 21:19:02 Topic: Fixed URI 21:19:21 AB: Mark's comments about needing to look at P3P 21:19:46 AB: what is the issue? 21:20:37 AvK: I think we want per resource 21:21:19 JS: not clear if P3P was being suggested as something we should use or something we should look at 21:21:39 ... can put the policy file in a header 21:22:04 dorchard has joined #waf 21:23:04 P3P use case is slightly different. The policy is retrieved in a special safe zone. 21:23:12 JS: I think Mark was talking about a mechanismm to associate a policy and a URI 21:23:13 (don't remember the spec's precise name for that) 21:23:19 +1 to JS actually 21:23:58 AB: Mark suggested this should be added to the Issue List. 21:24:03 ... What do you think? 21:24:13 AvK: too vague to know if that is true 21:24:26 JS: agree I'm not sure what he's looking for 21:24:48 TR: think he is concerened about scalability (e.g. Akami) 21:25:05 AvK: we need to ask for clarification 21:25:30 ACTION: Anne seek clarification from Mark about the P3P-related issue 21:25:30 Created ACTION-156 - Seek clarification from Mark about the P3P-related issue [on Anne van Kesteren - due 2008-01-30]. 21:27:43 -Dave_Orchard 21:28:32 AvK: I think we need a plan on how to move forward 21:28:51 ... e.g. new questions all the time 21:30:45 AB: I'm open to suggestions on how to move forward 21:30:56 AvK: I think the design is good 21:31:04 ... but there is a call for more rationale 21:31:36 q+ 21:32:02 ... dont' want to keep discussing reqs but prefer to talk about technical issues 21:33:28 q- 21:33:43 -q 21:33:48 q- tlr 21:35:11 Topic: Schedules 21:35:37 I remain convinced that the design is reflective of an implied set of requirements, of which there is not consensus. 21:35:41 TR: regarding Voice Confs, I have this slot on the 30th 21:35:54 ... will need to send regrets on the week of Feb 6 21:36:07 ... OK on Feb 13 21:36:23 ... but then it gets more difficult 21:37:03 JS: I can reiterate we are running out of time 21:37:13 ... I am nervous about getting this in FF3 21:38:15 AB: I propose we plan to have a call next week 21:39:08 TR: are we expecting to stick to this timeslot for the forseeable future? 21:39:20 AvK: this time is good 21:39:24 JS: me too 21:39:27 AB: me too 21:40:21 AB: meeting adjourned 21:40:22 -anne 21:40:24 -sicking 21:40:27 -Thomas 21:40:29 rrsagent, make log public 21:40:35 rrsagent, make minutes 21:40:35 I have made the request to generate http://www.w3.org/2008/01/23-waf-minutes.html Art 21:42:08 ScribeNick: Art 21:42:14 rrsagent, make minutes 21:42:14 I have made the request to generate http://www.w3.org/2008/01/23-waf-minutes.html Art 21:43:03 -ArtB 21:43:05 IA_WAF()3:00PM has ended 21:43:06 Attendees were Thomas, Dave_Orchard, +1.781.993.aaaa, ArtB, sicking, anne, Thomas.a 21:44:35 shepazu has joined #waf 21:45:30 trackbot-ng, close ACTION-156 21:45:30 ACTION-156 Seek clarification from Mark about the P3P-related issue closed 21:45:36 if that's what you meant 21:48:45 tlr has joined #waf 21:49:21 well, i suppose 21:49:31 i meant more that i e-mailed Mark :) 21:49:54 anne, ping 21:50:02 pong 21:50:17 are you interested in attending the D3E telcons? 21:50:24 trackbpt-ng, reopen ACTION-156 21:50:32 if so, does Monday or Friday work better for you? 21:50:59 monday would work 21:51:04 same time 21:51:18 ok, would you propose that to the WG? 21:51:22 thanks 21:51:51 I'm glad you said Monday... Friday would be bad for most people 21:52:23 rrsagent, bye 21:52:23 I see 3 open action items saved in http://www.w3.org/2008/01/23-waf-actions.rdf : 21:52:23 ACTION: Thomas submit proposal to the mail list regarding the policy decision split and complexity [1] 21:52:23 recorded in http://www.w3.org/2008/01/23-waf-irc#T20-49-54 21:52:23 ACTION: Jonas send a request for comments regarding the policy decision questions and issues [2] 21:52:23 recorded in http://www.w3.org/2008/01/23-waf-irc#T20-51-47 21:52:23 ACTION: Anne seek clarification from Mark about the P3P-related issue [3] 21:52:23 recorded in http://www.w3.org/2008/01/23-waf-irc#T21-25-30