18:40:52 RRSAgent has joined #crypto 18:40:52 logging to http://www.w3.org/2014/03/10-crypto-irc 18:40:54 RRSAgent, make logs public 18:40:54 Zakim has joined #crypto 18:40:56 Zakim, this will be CRYPT 18:40:56 ok, trackbot; I see SEC_WebCryp()3:00PM scheduled to start in 20 minutes 18:40:57 Meeting: Web Cryptography Working Group Teleconference 18:40:57 Date: 10 March 2014 18:53:00 terri has joined #crypto 18:53:20 Note that the call is in one hour, 20:00 UTC 18:53:54 wseltzer has changed the topic to: WebCrypto call at 2000 UTC 19:26:53 jyates has joined #crypto 19:51:15 virginie has joined #crypto 19:52:16 drew has joined #crypto 19:52:24 zakim, this will be SEC_WebCryp 19:52:24 ok, virginie; I see SEC_WebCryp()3:00PM scheduled to start 52 minutes ago 19:52:59 zakim, this is SEC_WebCryp 19:52:59 virginie, I see SEC_WebCryp()3:00PM in the schedule but not yet started. Perhaps you mean "this will be SEC_WebCryp". 19:53:05 zakim, this will be SEC_WebCryp 19:53:05 ok, virginie; I see SEC_WebCryp()3:00PM scheduled to start 53 minutes ago 19:53:15 agenda? 19:53:23 agenda+ welcome 19:54:08 agenda+ Decision to go for Last Call for the Web Crypto API and the Web Crypto Key Discovery API 19:54:23 agenda+ Action plan to advert the Last Call status of our specs to the external world 19:54:25 SEC_WebCryp()3:00PM has now started 19:54:26 sangrae has joined #crypto 19:54:32 + +1.617.253.aaaa 19:54:38 agenda+ Future Work of the WG 19:54:54 Zakim, aaaa is jyates 19:54:54 +jyates; got it 19:55:01 agenda+ Working Group Life (conf call rhythm, next F2F meeting in Spring, ...) 19:55:54 helo joanne, the call will start in 5 minues 19:56:21 hhalpin has joined #crypto 19:56:29 Zakim, this is crypt 19:56:29 hhalpin, this was already SEC_WebCryp()3:00PM 19:56:30 ok, hhalpin; that matches SEC_WebCryp()3:00PM 19:56:46 Zakim, what's the code? 19:56:46 the conference code is 27978 (tel:+1.617.761.6200 sip:zakim@voip.w3.org), hhalpin 19:56:50 Virginie--thanks 19:56:56 I don't hear anything now 19:57:53 +[IPcaller] 19:57:57 Zakim, who's on the phone? 19:57:57 On the phone I see jyates, [IPcaller] 19:58:20 markw has joined #crypto 19:59:25 +[Netflix] 19:59:34 Zakim, [Netflix] is me 19:59:34 +markw; got it 19:59:40 +virginie 19:59:46 mete has joined #crypto 19:59:52 -markw 20:00:15 agenda? 20:00:29 +[Netflix] 20:00:42 +[IPcaller.a] 20:00:43 Zakim, [Netflix] is me 20:00:44 +markw; got it 20:00:47 zakim, who is on the call ? 20:00:47 On the phone I see jyates, [IPcaller], virginie, markw, [IPcaller.a] 20:00:49 +[IPcaller.aa] 20:01:27 Zakim, IPcaller is hhalpin 20:01:27 +hhalpin; got it 20:01:42 chair: Virginie 20:01:51 RRSAgent, generate minutes 20:01:51 I have made the request to generate http://www.w3.org/2014/03/10-crypto-minutes.html hhalpin 20:02:05 zakim, i am IPcaller.a 20:02:05 ok, drew, I now associate you with [IPcaller.a] 20:02:12 zakim, IPcaller.aa is sangrae 20:02:12 +sangrae; got it 20:02:43 Minutes from last telco: http://www.w3.org/2014/03/03-crypto-minutes.html 20:03:08 Zakim, pick a scribe? 20:03:08 I don't understand your question, hhalpin. 20:03:10 Zakim, pick a scribe 20:03:10 Not knowing who is chairing or who scribed recently, I propose markw 20:03:13 Zakim, pick a scribe 20:03:13 Not knowing who is chairing or who scribed recently, I propose virginie 20:03:16 Zakim, pick a scribe 20:03:16 Not knowing who is chairing or who scribed recently, I propose [IPcaller.a] 20:03:17 Zakim, pick a scribe 20:03:19 Not knowing who is chairing or who scribed recently, I propose virginie 20:03:20 Zakim, pick a scribe 20:03:20 Not knowing who is chairing or who scribed recently, I propose [IPcaller.a] 20:03:22 Zakim, pick a scribe 20:03:23 Not knowing who is chairing or who scribed recently, I propose virginie 20:03:37 vgb has joined #crypto 20:03:40 scribe: hhalpin 20:03:45 zakim, IPcaller.a is drew 20:03:45 +drew; got it 20:04:01 +[Microsoft] 20:04:11 zakim, [microsoft] is me 20:04:11 +vgb; got it 20:04:35 zakim, who is on the call ? 20:04:35 On the phone I see jyates, hhalpin, virginie, markw, drew, sangrae, vgb 20:04:54 +[Microsoft] 20:05:14 israelh has joined #crypto 20:05:42 zakim, who is on the call ? 20:05:42 On the phone I see jyates, hhalpin, virginie, markw, drew, sangrae, vgb, [Microsoft] 20:05:46 + +1.503.712.aabb 20:06:00 Zakim, aabb is me 20:06:00 +terri; got it 20:06:02 Any objections to approve minutes from last call? 20:06:21 agenda? 20:06:22 APPROVED: http://www.w3.org/2014/03/03-crypto-minutes.html 20:07:09 virginie: this meeting will make a decision on the Last Call 20:07:25 nvdbleek has joined #crypto 20:07:38 zakim, code? 20:07:38 the conference code is 27978 (tel:+1.617.761.6200 sip:zakim@voip.w3.org), nvdbleek 20:07:41 ... we will now start being a bit more formal with minutes, formally approving them 20:08:06 (given the formal decisions we will be making, we need to make sure they occur) 20:08:14 (and are recorded accurately) 20:08:24 Zakim, next agendum 20:08:24 agendum 1. "welcome" taken up [from virginie] 20:08:42 topic: Last Call for WebCrypto API 20:08:45 Zakim, next agendum 20:08:45 agendum 1 was just opened, hhalpin 20:09:04 virginie: status update on WebCrypto API? 20:09:25 markw: We were pretty close on closing all the bugs that were identified the bugs 20:09:32 +nvdbleek 20:09:35 ... ruled on favor of meaningful error codes as proposed by Microsoft 20:09:36 zakim, mute me 20:09:36 nvdbleek should now be muted 20:09:57 ... bugs are still open because lack of confirm from rsleevi, but as far as I'm concerned its complete 20:10:14 ... still some open bugs, but none in the category of needing to complete before entering last call. 20:10:21 ... I think we're in good shape to go forward 20:10:30 virginie: any questions that would challenge the idea of going to Last Call? 20:11:00 markw: rsleevi isn't here, but rsleevi thinks that we may need to use JWK for Javascript Objects 20:11:09 ... right now we support actual JWK objects 20:11:16 ... should we go for them as actual JSON objects 20:11:24 ... we discussed and rejected in past, no reason not to revisit 20:11:37 ... not an alternative IMHO, could be a new potential feature 20:12:07 virginie: any question to editor of the current spec? 20:12:19 ... seems like there is no open questions 20:12:38 https://dvcs.w3.org/hg/webcrypto-api/raw-file/tip/spec/Overview.html 20:12:45 from the 7th of march 20:13:16 vgb: Should we put a comment about the JWK in the spec so folks know that is done by design 20:13:34 markw: seems import/export is consistent as you always get serialized data 20:13:40 ... now the idea to expose this in an object format 20:13:52 s/vgb/israelh/ 20:14:30 markw: as for as I know, it's a new feature 20:14:33 -nvdbleek 20:14:42 israelh: If we already identified that was something we don't want to cover now 20:14:57 +nvdbleek 20:15:06 ... I think we should go into Last Call without making any more design last calls, going forward with this as a potential 20:15:09 zakim, mute me 20:15:09 nvdbleek should now be muted 20:15:10 Zakim, who's making noise? 20:15:21 hhalpin, listening for 10 seconds I heard sound from the following: virginie (9%), [Microsoft] (100%) 20:15:22 isarelh: it seems like we should just go ahead and get a resolution 20:15:32 ... we could say its v2.0 feature 20:16:03 virginie: I think this is not a feature that would not take so much time to agree on. 20:16:28 ... we could wait for the next version of spec 20:17:18 ... we said we would address JWK only in last call? 20:17:20 q+ 20:17:46 markw: One time we discussed we should in context of wrap/unwrap object 20:18:03 ... but we were looking at is as either-or 20:18:10 ... we could postpone to v2.0 20:18:25 q? 20:19:11 q+ 20:19:22 q+ 20:19:25 ack hhalpin 20:20:05 q+ 20:20:37 q- 20:21:30 hhalpin: I am noting that rsleevi, who is an editor and represents Google is not on the call 20:21:44 ... we could use this time to fix the JWK issue 20:22:09 markw: would want to go to Last Call, feels like we do this later 20:22:40 virginie: Apparently rsleevi wants to have the Last Call decision over email 20:22:44 q+ 20:23:10 israelh: I think the last open issue was the error types 20:23:32 ... he can express over email 20:23:45 ... his concerns, or do we just go to Last Call now? 20:24:47 q+ 20:24:48 virginie: We can go to the telecon 20:24:52 ... and make a telecon 20:25:04 -nvdbleek 20:25:23 zakim, mute me 20:25:23 +nvdbleek 20:25:23 nvdbleek should now be muted 20:27:21 We make an initial decision here, but open it up to the mailing list 20:27:43 and then we discuss with everyone in the WG that are open 20:27:57 to confirming or formally objecting to the Last Call 20:28:16 q+ 20:28:59 and then go to Last Call if everyone on mailing lists agrees in 2 weeks. 20:29:10 rsleevi has joined #crypto 20:29:30 If they don't, we either open new issues or go to Last Call. 20:29:33 at the next telecon 20:29:35 +[Google] 20:29:50 israelh: I'm OK with that, but we need to figure out if things are in scope or not 20:30:07 I have made the request to generate http://www.w3.org/2014/03/10-crypto-minutes.html rsleevi 20:30:11 vgb: I think we've been stable for a very long time, so we should go to last call 20:31:34 q? 20:31:38 q- 20:31:39 q- hhalpin 20:31:44 q- 20:31:48 q- 20:32:20 rsleevi: I'm going through the minutes, I don't entirely agree with Mark on the JWK regarding import/export 20:32:51 ... I think we should explore other path, would it be appropriate to get feedback besides developers 20:33:08 q+ 20:33:09 q+ 20:33:19 ... I have gotten feedback that it is better 20:33:25 q? 20:34:20 rsleevi: we're still identifying blocking points because we're still getting 20:34:40 ... another WD with a short last call or a Last Call with a longer feedback cycle 20:35:30 -nvdbleek 20:36:10 +nvdbleek 20:36:16 q? 20:36:16 zakim, mute me 20:36:18 nvdbleek should now be muted 20:37:18 we can either go for last call now if this is a developer issue, or if it's a Google issue then we could delay till last call. 20:37:48 rsleevi: both, even in Google we think its unusable or we can wait for developers to tell us that 20:38:23 markw: what we have is a JSON object, we also expose a Javascript version of JWK. But we could even do that to ASN.1 20:38:42 ... so I don't think its unusable, that's an easy function for someone to do 20:38:52 ... this idea has been clear for months and months 20:38:56 q- 20:39:08 ... we can deal with this at Last Call 20:39:52 rsleevi: I want to re-iterate ASN.1 that this can be done as easily is false, most of DOM4 can be implemented as functions in JQuery, that may not be good for developers 20:40:25 ... at the primary example, we just changed RSA and HMAC in breaking manner, and the mapping to JWK - those mapping tables show there are gaps within the scope and impedance mismatch between JWK and this spec 20:40:35 q+ 20:40:56 s/we also expose a Javascript version/the proposal is that we also expose a Javascript object/ 20:40:56 ack rsleevi 20:40:57 ... we are revisiting, but it's clear that are several issues on usability 20:41:33 @hhalpin: They're issues on our end (our spec) 20:42:10 q+ 20:42:37 @hhalpin: Again, if we go to last call, I think we need to have a suitable last call period to allow feedback from everyone - that is, 3 weeks is not desirable 20:42:38 Its not a big deal if a member wants 2 more weeks to review, it would be worrisome if the process never ended. 20:43:01 So as long as we commit to addressing the issue, then I think that's fine. 20:43:12 israelh: Is there a list of other issues that you have defined, or is this the last one? 20:43:28 ... anything else major? 20:43:58 rsleevi: we made a lot of changes in last month, some have overlapped, we are still not confident there's been review within the WG 20:44:19 ... if we go to Last Call for not only Working Group members to review the spec, as well as the general public 20:44:32 ... there's no confidence that the spec has been widely reviewed 20:44:42 ... we are very concerned, especially with the compressed period 20:44:47 q- 20:44:51 q- 20:44:57 -[Google] 20:45:01 virginie: this is normal to go forward 20:45:30 +[Google] 20:45:37 ... I would suggest we go for Last Call and add a note to address the JWK issue during Last Call 20:46:14 -nvdbleek 20:46:23 PROPOSAL: Go to Last Call and add a note with 8 weeks of review. 20:46:26 Resolution : go for last call with a note calling for JWK javascript object with 8 weeks of review 20:46:28 +nvdbleek 20:46:30 zakim, mute me 20:46:30 nvdbleek should now be muted 20:47:27 rsleevi: As aggressively we'd like to get Last Call, and I think 8 weeks is an appropriate time as once we ship we want to get changes 20:47:40 q+ 20:47:46 ack rsleevi 20:48:07 I can send it today. 20:48:09 israelh: How do we feel as a group if we can get a proposal for solving the JWK issue within 2 weeks? 20:48:12 q+ 20:48:45 ... we just give a resolution to solve this, and then if this is an issue we need to solve from an implementer perspective, then we can move forward 20:48:55 q+ 20:49:15 virginie: New WD that solves this JWK issue, and then go Last Call 20:49:21 ... just filling in the blanks 20:49:48 markw: I think it would be better to go to Last Call now, if the proposal was to import/export Javascript Object 20:49:49 @markw: That's no the proposal 20:50:02 ... that's simple 20:50:19 @markw: It doesn't break wrap/unwrap 20:50:24 ... if the proposal is to replace existing JWK import/export that would break wrap/unwrap 20:50:37 -markw 20:50:43 q+ 20:50:48 terri: Given we just spent another hour, then maybe we just publish new working draft 20:50:51 q- 20:50:54 q- markw 20:51:15 +[Netflix] 20:51:23 Zakim, [Netflix] is markw 20:51:23 +markw; got it 20:51:28 israelh: I'm wondering if what Mark suggested is a reasonable approach and then a way to JSON 20:51:47 .. ize the objects that doesn't break wrap/unwrap 20:52:31 rsleevi: My concern is do we make JWK an JSON Web Key object, I'm not sure if question of breaking wrap/unwrap - but what is suitble default, ArrayBuffer or object? 20:53:39 virginie: We give ourselves 2 weeks way to solve JWK object question out, and then we go to Last Call. If there is no technical solution, then we replay the WD. 20:53:46 ... we can't go to LC without this feature? 20:54:05 rsleevi: If we go to LC then we have to forward with this as a continuing questions, we may make breaking changes 20:54:28 q+ 20:54:37 q+ 20:54:46 Why not 2 weeks and then Last Call? 20:55:05 markw: 2 weeks deliverable doesn't seem to object 20:55:08 q? 20:55:17 ... we get message to developers sooner rather than later 20:55:26 q+ 20:56:37 -nvdbleek 20:56:49 can we sort that in 2 weeks? 20:56:51 how about get a proposal this week and discuss it next week so we can have a meaningful last call conversation in 2 weeks? 20:56:58 and then we go to Last Call next meeting? 20:57:04 q+ 20:57:22 virginie: action to ryan and mark to have a technical proposal for this feature 20:57:35 ... 2 weeks we go to Last Call? 20:57:41 yes, i want to make sure we don't come to the next call saying we haven't had time to review the proposal 20:57:42 Is this a workable plan? 20:58:05 markw: I was arguing we go to Last Call now 20:58:22 virginie: but I hear terri and rsleevi wanting to address this before we go to Last Call now 20:58:29 I would like to clarify that 20:58:35 I don't think my position is being represented 20:58:53 israelh: Let's give ourselves a time limit of 2 weeks, and then we come up of a soltuion, then we go for standard last call 20:58:58 ... seems reasonable 20:59:17 I can go with what Isreal says 20:59:31 To re-iterate: If we decide *not* to block LC, then we need an extended LC and will likely revisit this. 20:59:51 I agree with israelh, just that we not make the decision in 1 minute since it's clear we don't really agree enough for last call today. 20:59:53 PROPOSAL: Revisit Last Call in 2 weeks with action to solve this JWK 21:00:00 ... issue 21:00:43 rsleevi: proposal should be 8 weeks, regardless 2 week + 6 week last call 21:01:31 i can write up a proposal fairly quickly for the JWK thing, and we cna discuss it on the list starting tomorrow. ok? 21:01:51 @vgb: I can have it up today within a few hours 21:01:52 terri: I would be OK with that 21:02:04 @rsleevi even better :) 21:02:17 The question for the WG is what should the *default* be for "JWK", which is where I think the only 'contention' is 21:03:50 PROPOSAL: Take the current ED to LC for 8 weeks, with an "open issue" of JWK 21:04:11 resolution : Last call with 8 weeks of comments with a note and an action to adress the JWK aspect 21:04:39 +1 21:04:44 +1 21:04:48 +1 21:04:58 +1 (as gemalto) 21:05:05 -1, this feels rushed to me. 21:05:10 but it's fine if I'm outvoted. 21:05:13 +1 21:05:47 +0 . It works. It's up to the WG what it wants to signal 21:06:00 -1 but I can live with the group consensus 21:06:08 terri: I don't think it's a good idea but I can live with it 21:06:43 RESOLUTION: Going to Last Call and we ask for 8 weeks of review for Last Call. 21:06:55 RRSAgent, generate minutes 21:06:55 I have made the request to generate http://www.w3.org/2014/03/10-crypto-minutes.html hhalpin 21:07:25 virginie: next call 24th of march 21:07:42 virginie: thanks everyone, let's close call. 21:07:53 trackbot, end meeting 21:07:53 Zakim, list attendees 21:07:53 As of this point the attendees have been +1.617.253.aaaa, jyates, markw, virginie, hhalpin, sangrae, drew, vgb, [Microsoft], +1.503.712.aabb, terri, nvdbleek, [Google] 21:07:56 -[Google] 21:07:56 -markw 21:07:56 -[Microsoft] 21:07:57 -jyates 21:07:59 -drew 21:08:00 -virginie 21:08:00 -hhalpin 21:08:01 RRSAgent, please draft minutes 21:08:01 I have made the request to generate http://www.w3.org/2014/03/10-crypto-minutes.html trackbot 21:08:01 -sangrae 21:08:01 -vgb 21:08:02 RRSAgent, bye 21:08:02 I see no action items 21:08:05 -terri