22:00:01 <RRSAgent> RRSAgent has joined #webappsec
22:00:01 <RRSAgent> logging to http://www.w3.org/2012/12/18-webappsec-irc
22:00:07 <bhill2> rrsagent, set logs public visible
22:00:26 <Zakim> + +1.408.320.aaaa
22:00:33 <bhill2> Meeting: WebAppSec WG Teleconference, 18-DEC-2012
22:00:41 <Zakim> +??P2
22:01:06 <gioma1> Zakim, ??P2 is gioma1
22:01:06 <Zakim> +gioma1; got it
22:01:11 <Zakim> + +1.781.362.aabb
22:01:12 <Zakim> +[IPcaller]
22:01:21 <bhill2> zakim, IPcaller is bhill2
22:01:21 <Zakim> +bhill2; got it
22:01:41 <dhuang3> zakim, aaaa is dhuang3
22:01:41 <Zakim> +dhuang3; got it
22:01:44 <bhill2> Agenda: http://lists.w3.org/Archives/Public/public-webappsec/2012Dec/0027.html
22:01:52 <bhill2> Chair: bhill2, ekr
22:01:58 <bhill2> Scribe: David Huang
22:02:06 <bhill2> Scribenick: dhuang3
22:02:39 <bhill2> zakim, aaaa is dhuang3
22:02:39 <Zakim> sorry, bhill2, I do not recognize a party named 'aaaa'
22:02:52 <bhill2> zakim, who is here?
22:02:52 <Zakim> On the phone I see abresee, dhuang3, gioma1, +1.781.362.aabb, bhill2
22:02:53 <Zakim> On IRC I see RRSAgent, Zakim, bhill2, dhuang3, gioma1, odinho, bhill, trackbot, timeless, mkwst_, tobie, caribou, erlend
22:03:13 <bhill2> zakim, aabb is gopal
22:03:13 <Zakim> +gopal; got it
22:03:16 <Zakim> +??P5
22:03:22 <abresee> abresee has joined #webappsec
22:03:42 <bhill2> zakim, P5 is erlend
22:03:42 <Zakim> sorry, bhill2, I do not recognize a party named 'P5'
22:03:57 <bhill2> zakim, ??P5 is erlent
22:03:57 <Zakim> +erlent; got it
22:04:13 <bhill2> s/erlent/erlend
22:04:17 <erlend> np
22:04:21 <bhill2> guess we'll have to fix that in the notes later
22:04:24 <Zakim> +[IPcaller]
22:05:18 <bhill2> zakim, IPcaller is tgondrom
22:05:18 <Zakim> +tgondrom; got it
22:05:22 <erlend> zakim, erlent is erlend
22:05:22 <Zakim> +erlend; got it
22:06:10 <dveditz> dveditz has joined #webappsec
22:06:10 <Zakim> + +1.415.832.aacc
22:06:13 <Zakim> + +1.650.214.aadd
22:06:40 <bhill2> http://www.w3.org/2012/12/04-webappsec-minutes.html
22:06:45 <bhill2> draft minutes from last teleconference
22:06:46 <ekr_> ekr_ has joined #webappsec
22:06:53 <mkwst_> zakim, aadd is mkwst
22:06:53 <Zakim> +mkwst; got it
22:06:55 <ekr_> Having some phone glitches
22:07:04 <bhill2> http://lists.w3.org/Archives/Public/public-webappsec/2012Dec/0027.html
22:07:07 <Zakim> +ekr
22:07:20 <bhill2> any new items for the agenda?
22:07:39 <jeffh> jeffh has joined #webappsec
22:07:58 <dhuang3> no new items for agenda
22:08:13 <dhuang3> bhill2: congrats to csp 1.1 fpwd
22:08:45 <bhill2> http://www.w3.org/2011/webappsec/track/actions/open
22:08:57 <ekr_> brad, I can edit the tracker if you want to talk
22:09:16 <dhuang3> bhill2: closing action 70
22:09:28 <Zakim> +??P10
22:09:52 <ekr_> zakim, who is making noise
22:09:52 <Zakim> I don't understand 'who is making noise', ekr_
22:09:57 <ekr_> zakim, who is talking?
22:09:57 <dhuang3> heavy echo, can't hear
22:10:08 <Zakim> ekr_, listening for 10 seconds I heard sound from the following: bhill2 (12%)
22:10:14 <ekr_> that's awesome
22:11:23 <Zakim> +[IPcaller]
22:11:55 <dveditz> Zakim, IPcaller is dveditz
22:11:55 <Zakim> +dveditz; got it
22:12:02 <dveditz> Zakim, who is here?
22:12:02 <Zakim> On the phone I see abresee, dhuang3, gioma1, gopal, bhill2, erlend, tgondrom, +1.415.832.aacc, mkwst, ekr, ??P10, dveditz
22:12:04 <Zakim> On IRC I see jeffh, ekr_, dveditz, abresee, RRSAgent, Zakim, bhill2, dhuang3, gioma1, odinho, bhill, trackbot, timeless, mkwst_, tobie, caribou, erlend
22:12:30 <dhuang3> bhill2: action 87 remain open, new mail on list today
22:12:55 <dhuang3> bhill2: closing action 90, dross intends to participate
22:14:45 <dhuang3> bhill2: action 92 still open, no changes yet
22:15:40 <Zakim> -gopal
22:16:04 <dhuang3> bhill2: action 93, removed by mike
22:16:54 <dhuang3> bhill2: action 99 closed
22:16:59 <puhley> puhley has joined #webappsec
22:17:45 <dhuang3> bhill2: action 100, 87 closed
22:18:45 <dhuang3> bhill2: action 103 closed, has responded
22:19:43 <dhuang3> bhill2: update on cors to cr, next publication date is jan 2
22:20:21 <dhuang3> bhill2: addressed some small bugs
22:21:39 <dhuang3> bhill2: have some requests on CSP reporting
22:21:50 <dhuang3> bhill2: any opinions?
22:22:50 <dhuang3> tobias: wonder if the level of detail in reports would be concerning?
22:24:05 <dhuang3> mike: line numbers of JS may avoid leaking sensitive information, don't see major security impact
22:24:07 <dveditz> question: which list do we use, public-web-security seems to be "official", but the WG page on w3.org still points at public-webappsec?
22:24:30 <dveditz> both seem active
22:25:06 <dhuang3> bhill2: may address some of that by avoiding interference of extensions and csp
22:25:41 <dhuang3> bhill2: and also intermediate devices
22:27:02 <dhuang3> tobias: is there any overflow risk? probably not
22:27:22 <jeffh> dveditz:  public-webappsec@w3.org  is the WG list
22:27:35 <dhuang3> bhill2: gioma responded on list about UI safety/security/integrity
22:29:01 <dveditz> jeffh: oh, I reversed it? OK, the names make more sense then
22:29:07 <dhuang3> bhill2: security/safety... integrity of information or integrity of person, any objections or preference to changing name?
22:29:57 <dhuang3> bhill2: slighty favor UI security over UI integrity
22:30:14 <jeffh> sounds fine
22:30:43 <bhill2> ACTION to bhill2 change short name from UI Safety to UI Security on next WD publication
22:30:43 <trackbot> Sorry, couldn't find to. You can review and register nicknames at <http://www.w3.org/2011/webappsec/track/users>.
22:30:48 <dhuang3> bhill2: no objections changing to UI security
22:31:03 <bhill2> ACTION bhill2 to change short name from UI Safety to UI Security on next WD publication
22:31:03 <trackbot> Created ACTION-105 - Change short name from UI Safety to UI Security on next WD publication [on Brad Hill - due 2012-12-25].
22:31:53 <bhill2> http://lists.whatwg.org/pipermail/whatwg-whatwg.org/2012-November/038213.html
22:32:36 <dhuang3> bhill2: should wait for abarth to discuss this
22:33:36 <jeffh> dveditz: public-web-security@  is the list for   <http://www.w3.org/Security/wiki/IG>  but was the precursor list for  the  WebAppSec WG
22:33:46 <dhuang3> bhill2: next call will be skipped
22:33:48 <Zakim> -ekr
22:33:52 <Zakim> -dveditz
22:33:53 <Zakim> -erlend
22:33:55 <Zakim> - +1.415.832.aacc
22:33:55 <Zakim> -tgondrom
22:33:57 <Zakim> -??P10
22:33:57 <Zakim> -abresee
22:33:58 <Zakim> -mkwst
22:34:08 <Zakim> -bhill2
22:34:24 <Zakim> -gioma1
22:34:26 <Zakim> -dhuang3
22:34:27 <Zakim> SEC_WASWG()5:00PM has ended
22:34:27 <Zakim> Attendees were abresee, +1.408.320.aaaa, gioma1, +1.781.362.aabb, bhill2, dhuang3, gopal, tgondrom, erlend, +1.415.832.aacc, +1.650.214.aadd, mkwst, ekr, dveditz
22:35:10 <bhill2> rrsagent, make minutes
22:35:10 <RRSAgent> I have made the request to generate http://www.w3.org/2012/12/18-webappsec-minutes.html bhill2
22:35:15 <bhill2> rrsagent, set logs public visible
22:35:21 <bhill2> bhill2 has left #webappsec