19:55:27 RRSAgent has joined #crypto 19:55:27 logging to http://www.w3.org/2013/04/15-crypto-irc 19:55:29 RRSAgent, make logs public 19:55:31 Zakim, this will be SEC_WebCryp 19:55:31 ok, trackbot; I see SEC_WebCryp()4:00PM scheduled to start in 5 minutes 19:55:32 Meeting: Web Cryptography Working Group Teleconference 19:55:32 Date: 15 April 2013 19:55:41 Regrets+ Virginie 19:57:32 jyates has joined #crypto 19:58:36 SEC_WebCryp()4:00PM has now started 19:58:43 + +1.857.928.aaaa 19:59:46 + +1.650.214.aabb 20:00:02 ddahl has joined #crypto 20:00:31 aaaa=jyates 20:00:47 + +1.512.257.aacc 20:00:53 rsleevi has joined #crypto 20:01:02 +ddahl 20:01:04 Zakim, who is on the line? 20:01:04 I don't understand your question, rsleevi. 20:01:06 aacc is Karen 20:01:09 Zakim, who is on the phone? 20:01:09 On the phone I see +1.857.928.aaaa, +1.650.214.aabb, +1.512.257.aacc, ddahl 20:01:16 Zakim, aabb is Google 20:01:16 +Google; got it 20:01:19 Zakim, Google has rsleevi 20:01:19 +rsleevi; got it 20:01:37 +[IPcaller] 20:01:38 Zakim, aacc is Karen 20:01:39 +Karen; got it 20:01:51 Zakim, aaaa is jyates 20:01:51 +jyates; got it 20:02:07 +??P10 20:02:17 zakim, ??p10 is I 20:02:17 +wseltzer; got it 20:02:22 nvdbleek has joined #crypto 20:02:38 zakim, code? 20:02:38 the conference code is 27978 (tel:+1.617.761.6200 sip:zakim@voip.w3.org), nvdbleek 20:03:03 +??P11 20:03:19 zakim, I am ??P11 20:03:19 +nvdbleek; got it 20:03:38 zakim, who is here? 20:03:38 On the phone I see jyates, Google, Karen, ddahl, [IPcaller], wseltzer, nvdbleek 20:03:40 Google has rsleevi 20:03:40 On IRC I see nvdbleek, rsleevi, ddahl, jyates, RRSAgent, sangrae, hhalpin, Zakim, karen, timeless, slightlyoff, wseltzer, trackbot 20:04:22 arunranga has joined #crypto 20:04:37 +[IPcaller.a] 20:04:46 Zakim, IPcaller.a is hhalpin 20:04:46 +hhalpin; got it 20:04:54 chair: hhalpin 20:05:00 Zakim, pick a scribe 20:05:00 Not knowing who is chairing or who scribed recently, I propose ddahl 20:05:11 scribe: ddahl 20:05:28 http://www.w3.org/2013/04/01-crypto-minutes.html 20:05:34 PROPOSAL: http://www.w3.org/2013/04/01-crypto-minutes.html are the correct minutes 20:05:36 + +1.415.294.aadd 20:05:39 RESOLVED: http://www.w3.org/2013/04/01-crypto-minutes.html are the correct minutes 20:05:48 Zakim, aadd is arunranga 20:05:48 +arunranga; got it 20:05:56 topic: Closing issues 20:05:56 ISSUE-7? 20:05:56 ISSUE-7 -- Deciding if we integrate a high level API in our deliverable -- open 20:05:56 http://www.w3.org/2012/webcrypto/track/issues/7 20:05:58 ISSUE-7 20:05:58 ISSUE-7 -- Deciding if we integrate a high level API in our deliverable -- open 20:05:58 http://www.w3.org/2012/webcrypto/track/issues/7 20:05:59 hhalpin: mainly dealing in housekeeping today 20:06:08 hhalpin: issue 7 is first 20:06:14 PROPOSAL: Close ISSUE-7 20:06:20 +1 20:06:22 +1 20:06:22 +1 20:06:23 +1 20:06:37 markw has joined #crypto 20:06:50 RESOLVED: http://www.w3.org/2012/webcrypto/track/issues/7 is CLOSED due to ddahl's document, but the document may not end up being Rec-track 20:07:06 ISSUE-17 20:07:06 ISSUE-17 -- Define the scope and API for custom key attributes -- open 20:07:06 http://www.w3.org/2012/webcrypto/track/issues/17 20:07:22 + +1.408.540.aaee 20:07:33 Zakim, aaee is me 20:07:33 +markw; got it 20:07:34 hhalpin: issue 17 was non-contreversial as well 20:07:46 PROPOSAL: http://www.w3.org/2012/webcrypto/track/issues/17 is closed and the answer is "there iwll not be aan API for custom key attributes 20:07:49 +1 20:07:52 +1 20:07:53 +1 20:08:14 Zakim, markw is Netflix 20:08:14 +Netflix; got it 20:08:22 RESOLVED: http://www.w3.org/2012/webcrypto/track/issues/17is closed and the answer is there will not be an API for custom key attributes 20:08:32 Zakim, Netflix has markw, skelly 20:08:32 +markw, skelly; got it 20:08:47 hhalpin: next is issue 22 20:08:53 http://www.w3.org/2012/webcrypto/track/issues/22 20:08:57 ... cloneable discussion 20:08:58 I do not aymeric 20:08:59 ISSUE-22? 20:08:59 ISSUE-22 -- Should CryptoOperations be clonable -- open 20:08:59 http://www.w3.org/2012/webcrypto/track/issues/22 20:09:10 does anyone else want clonability? 20:09:19 hhalpin: amyeric is the only one who wanted clonaeability 20:10:10 rsleevi: not stong feelings either way, aymeric's use cases and explanations were not ideal, not going to cry if it goes away, even though there may actualy be solid usecases 20:10:33 hhalpin: we could keep it open and if no uses cases come up, we close it 20:10:48 rsleevi: there are use cases, but, do we need thins in v. 1.0? 20:10:57 Zakim, who's making noise? 20:11:05 Can we list the strong use cases for .clone that are better than Aymeric's scary ones? 20:11:10 hhalpin, listening for 10 seconds I heard sound from the following: [IPcaller] (25%), hhalpin (10%), arunranga (74%) 20:11:15 Zakim, mute me 20:11:15 arunranga should now be muted 20:11:49 PROPOSAL: Close ISSUE-22 until we have a more tighter use-case and then add a new issue for that use-case 20:11:53 +1 20:11:55 +1 20:11:57 +1 20:11:58 +1 20:12:06 +1 20:12:07 RESOLVED: Closed ISSUE-22 until we have a more tighter use-case and then add a new issue for that use-case 20:12:28 http://www.w3.org/2012/webcrypto/track/issues/32 20:12:30 + +82.22.14.0.aaff 20:12:32 that's in SysApps now 20:12:44 hhalpin: issue 32, secure element, moved to sysaps WG 20:13:13 mountie has joined #crypto 20:13:17 q+ 20:13:21 hhalpin: anyone here in sysaps? establishing a connection with them might make some sense 20:13:41 ack rsleevi 20:13:47 q+ 20:13:50 anyone else from sysapps here? 20:13:53 hhalpin: sysaps WG should be notified that we are not doing anything with secure element 20:14:17 rsleevi: gemalto has proposed the secure element API 20:14:36 rsleevi: not aware of any formal agreements on implementing it 20:14:36 http://www.w3.org/2012/sysapps/ 20:15:07 hhalpin: this is a scoping issue and we are agreeing to not handle smartcard/seciure element apis 20:15:16 ack karen 20:15:20 hhalpin: proposes that we close issue 32 20:15:56 MIchael has joined #CRYPTO 20:15:59 So we want to interoperate with any future work (likely via Key Discovery work) in terms of SmartCard and SecureElements, but we are not writing our own APIs for these areas 20:16:15 karen: question: assume the sec element api made its way into sysapps... 20:16:35 q+ 20:16:35 if we want to convert or map the sysapp key to the web crypto API? 20:16:38 sounds good to me, but keeping a door open for smart card access through a discovery API might be an option in my opinion 20:16:41 ... how is that done 20:16:47 + +1.512.257.aagg 20:16:53 PROPOSAL: ISSUE-32 closed insofar as Secure Elements is now in SysApps, and interoperability with any future API will be done via interoperability with Key Discovery Draft. 20:16:56 ack rsleevi 20:16:57 Scott_Kelly has joined #crypto 20:17:03 karen: sooner or later we will need to deal with interoperability 20:17:25 Zakim, list attendees 20:17:25 As of this point the attendees have been +1.857.928.aaaa, +1.650.214.aabb, +1.512.257.aacc, ddahl, rsleevi, [IPcaller], Karen, jyates, wseltzer, nvdbleek, hhalpin, +1.415.294.aadd, 20:17:28 ... arunranga, +1.408.540.aaee, markw, skelly, +82.22.14.0.aaff, +1.512.257.aagg 20:17:59 Zakim, aaff is mountie 20:17:59 +mountie; got it 20:18:03 rsleevi: not going to deal with apis not in scope or theoretical implenations 20:18:23 q? 20:18:29 rsleevi: we recognize that this is not a problem for this WG to take on at this time 20:19:02 karen: we don not want to solve the problem right now, but do WG generally work together with overlapping interests? 20:19:12 jeffh has joined #crypto 20:19:41 hhalpin: sometimes you have atask force between 2 WGs for related work 20:20:26 IPcaller is sangrae. Sangrae Cho from ETRI 20:20:55 ... we might want to clarify that we will handle keys from secure elements via key discovery api at alater time 20:21:37 q+ 20:21:46 hhalpin: within a use case doc we can specify the interop here 20:21:48 ack rsleevi 20:22:14 rsleevi: the proposal in sysaps by gemalto is not the same as our own use case 20:23:01 rsleevi: there is very clear charter sep. between the issues, but there are 2 different problems here between the WGs 20:23:08 you might also have a look at the wiki page I started about certificate discovery https://github.com/InventiveDesigners/webcrypto-key-certificate-discovery-js/wiki/API 20:23:39 PROPSOAL: ISSUE-32 closed insofar as Secure Elements is now in SysApps, and interoperability with any future API will be done via interoperability with Key Discovery Draft. 20:23:46 +1 20:23:59 s/PROPOSOAL/PROPOSAL 20:24:00 +1 20:24:16 +1 20:24:16 -1, due to the committment on interoperability for as of yet unspecified APIs 20:24:30 i agree with rsleevi here 20:24:31 Would prefer the second clause dropped 20:24:45 +1 20:24:55 PROPOSAL: ISSUE-32 closed insofar as Secure Elements is now in SysApps 20:24:58 +1 20:25:05 hhalpin: we could say possible future interop 20:25:08 +1 20:25:15 any objections to simpler terminology? 20:25:45 RESOLVED: ISSUE-32 closed insofar as Secure Elements is now in SysApps 20:25:48 @hhalpin - there are lots of other interop issues beyond key discovery (eg: handling of APDUs and crypto operations via smart cards, hence my objection 20:25:50 hhalpin: no objections, discussion next 20:26:16 section: unwrap and wrapping 20:26:17 hhalpin: unwarp/ wrap and separation of alg and operation params again 20:27:14 q+ 20:27:18 markw: I am suggesting we just rename tsome things and move things around as there has been some confusion in reading the key gen / operation params 20:28:07 markw: we should separate and clarify the dictionaries used in algs and operations 20:28:08 ack rsleevi 20:28:22 rsleevi: naming is hard 20:28:55 rsleevi: we should simplify things, however, not sure if there is no overlpa at all 20:29:07 Q= 20:29:12 q+ 20:29:13 rsleevi: you don't want to be able to generate a key that you cannot use 20:29:50 thus, the relationship to operation and algorithm parameters 20:30:06 q? 20:30:08 ack markw 20:30:31 markw: agree with the comments that this is hard to nail down here 20:30:59 q+ 20:31:16 markw: not sure how the operation params need to be re-specified once the key is already generated 20:31:32 ack rsleevi? 20:32:15 rsleevi: i am in agreement in the idea of if we move paramters to the key we should not have to specify in operation, but there are edge cases here 20:32:35 ... when we start writing example code the spec vastly changes 20:32:46 ... some hesitation here yest 20:33:23 hhalpin: makes sense to walk through this very carefully in the face to face 20:33:29 ack rsleevi 20:33:33 .. or not as time may be limited? 20:33:42 topic: f2f scheduling 20:34:11 rsleevi: i am planning on working through the issues before our f2f 20:34:24 www.w3.org/2012/webcrypto/wiki/F2F_April2013 20:34:32 rsleevi: [the devil is in the details] 20:34:33 lunch -> 4:30 PM