00:00:07 rrsagent, generate minutes 00:00:07 I have made the request to generate http://www.w3.org/2014/04/09-html-wg-minutes.html krisk_ 00:00:23 rubys: meeting ar recess until tomorrow morning at 9am PST 00:01:11 s/ar recess/at recess/ 00:03:13 gitbot has joined #html-wg 00:03:13 [13syntax] 15sideshowbarker pushed 1 new commit to 06master: 02https://github.com/validator/syntax/commit/cb21b5354cc6fd939cf38e8221282c17b6f5e79d 00:03:13 13syntax/06master 14cb21b53 15Michael[tm] Smith: Minor change. 00:03:13 gitbot has left #html-wg 01:48:10 jkiss has joined #html-wg 02:30:21 tantek has joined #html-wg 03:20:09 gitbot has joined #html-wg 03:20:09 [13html] 15techtoons pushed 1 new commit to 06html5_canvas_CR: 02https://github.com/w3c/html/commit/c209df326f23fa17f95edf9187dfab12e231a0ef 03:20:09 13html/06html5_canvas_CR 14c209df3 15Jay Munro: Added clearHitRegion() and other edits... 03:20:09 gitbot has left #html-wg 03:23:31 gitbot has joined #html-wg 03:23:31 [13html] 15techtoons pushed 1 new commit to 06html5_canvas_CR: 02https://github.com/w3c/html/commit/b17e400197770c9cae24bbd7b5398076cc02ce3f 03:23:31 13html/06html5_canvas_CR 14b17e400 15Jay Munro: added trace a path back... 03:23:31 gitbot has left #html-wg 04:03:21 mjs has joined #html-wg 04:28:15 SteveF has joined #html-wg 04:34:58 denis has joined #html-wg 05:27:03 SteveF has joined #html-wg 05:32:12 SteveF_ has joined #html-wg 05:42:08 tantek has joined #html-wg 06:00:40 stommepoes has joined #html-wg 06:00:42 darobin has joined #html-wg 06:58:47 jaymunro has joined #html-wg 06:58:47 arronei has joined #html-wg 07:36:33 Zakim has left #html-wg 08:20:41 arronei has joined #html-wg 08:23:03 krijnhoetmer has joined #html-wg 08:34:35 IanPouncey has joined #html-wg 16:08:26 RRSAgent has joined #html-wg 16:08:26 logging to http://www.w3.org/2014/04/09-html-wg-irc 16:08:49 scribenick: joesteele 16:08:51 chair: paulc 16:09:15 Zakim, who is here? 16:09:15 sorry, joesteele, I don't know what conference this is 16:09:17 On IRC I see RRSAgent, Zakim, IanPouncey, adrianba, joesteele, rubys, ArtB, aizu, cyril, markw, plh, dsinger, paulc, glenn, acolwell, jernoble, tantek, darobin, anssik, Lachy, 16:09:17 ... krit, krijnhoetmer, arronei, jaymunro, denis, jgraham, wilhelm, tH, gavin, slightlyoff_, hober, cwilso__, paul___irish, decadance, tobie__, AAA_awright, gsnedders, heycam|away, 16:09:21 ... cabanier, johndrinkwater, Josh_Soref_, pdr, timeless_, mattur, jmb, MarkS, Philip, logbot, stryx`, Hixie, ed, MikeSmith, trackbot 16:09:35 xiaoqian has joined #html-wg 16:09:36 eliot has joined #html-wg 16:10:49 Arrrno has joined #html-wg 16:10:51 krisk has joined #html-wg 16:11:11 edoyle has joined #html-wg 16:12:01 zakim, room for 10 for 120 minutes? 16:12:04 ok, plh; conference Team_(html-wg)16:12Z scheduled with code 26631 (CONF1) for 120 minutes until 1812Z; however, please note that capacity is now overbooked 16:12:08 adrianba has joined #html-wg 16:12:11 .me conference bridge is still "restricted" 16:12:26 passcode is 26631 16:12:38 please use this when connecting on the bridge 16:12:42 Team_(html-wg)16:12Z has now started 16:12:50 +Aaron_Colwell 16:12:53 +[IPcaller] 16:13:04 +[Paypal] 16:13:25 Zakim, [IPCaller] is me 16:13:25 +markw; got it 16:13:29 Zakim, who is here? 16:13:30 On the phone I see Aaron_Colwell, markw, [Paypal] 16:13:30 On IRC I see adrianba, edoyle, krisk, Arrrno, eliot, xiaoqian, RRSAgent, Zakim, IanPouncey, joesteele, rubys, ArtB, aizu, cyril, markw, plh, dsinger, paulc, glenn, acolwell, 16:13:30 ... jernoble, tantek, darobin, anssik, Lachy, krit, krijnhoetmer, arronei, jaymunro, denis, jgraham, wilhelm, tH, gavin, slightlyoff_, hober, cwilso__, paul___irish, decadance, 16:13:31 zakim, who is on the phone? 16:13:32 ... tobie__, AAA_awright, gsnedders, heycam|away, cabanier, johndrinkwater, Josh_Soref_, pdr, timeless_, mattur, jmb, MarkS, Philip, logbot, stryx`, Hixie, ed, MikeSmith, trackbot 16:13:32 On the phone I see Aaron_Colwell, markw, [Paypal] 16:13:34 BobLund has joined #html-wg 16:13:40 +[IPcaller] 16:13:46 adrianba_ has joined #html-wg 16:14:23 rrsagent, generate minutes 16:14:23 I have made the request to generate http://www.w3.org/2014/04/09-html-wg-minutes.html joesteele 16:14:29 adrianba_ has joined #html-wg 16:14:45 zakim, who is here ? 16:14:45 On the phone I see Aaron_Colwell, markw, [Paypal], [IPcaller] 16:14:46 jdsmith has joined #html-wg 16:14:47 On IRC I see adrianba_, BobLund, adrianba, edoyle, krisk, Arrrno, eliot, xiaoqian, RRSAgent, Zakim, IanPouncey, joesteele, rubys, ArtB, aizu, cyril, markw, plh, dsinger, paulc, 16:14:47 ... glenn, acolwell, jernoble, tantek, darobin, anssik, Lachy, krit, krijnhoetmer, arronei, jaymunro, denis, jgraham, wilhelm, tH, gavin, slightlyoff_, hober, cwilso__, 16:14:51 ... paul___irish, decadance, tobie__, AAA_awright, gsnedders, heycam|away, cabanier, johndrinkwater, Josh_Soref_, pdr, timeless_, mattur, jmb, MarkS, Philip, logbot, stryx`, Hixie, 16:14:51 ... ed, MikeSmith 16:15:01 paulc: walking through the agenda first 16:15:09 IanPouncey has joined #html-wg 16:15:23 hober has joined #html-wg 16:15:24 zakim, [IPCaller] is me 16:15:24 +cyril; got it 16:15:52 paulc: this is the meila - http://lists.w3.org/Archives/Public/public-html-media/2014Apr/0058.html 16:15:55 ddorwin has joined #html-wg 16:16:07 ... posted a link to the review of the pull request 16:16:20 A number of issues are in the 'critic' tool - indeed some good tests that expose interop issues in IE and Chrome 16:16:20 ... some comments supplied by folks in the room 16:16:21 https://critic.hoppipolla.co.uk/r/951 16:16:29 Mick has joined #html-wg 16:16:31 wonsuk_ has joined #html-wg 16:16:34 ... maybe Phillipe could give a review 16:16:47 Mick has left #html-wg 16:16:54 phillipe: 16:17:12 ... fixed link in one of the test -- Simon saying it needs to be fixed 16:17:24 ... once it is addressed, people says whether is acceptable 16:17:26 Mick_Hakobyan has joined #html-wg 16:17:37 paulc: was Aaron notified of each of the comments? 16:17:40 AAA_awright has joined #html-wg 16:17:49 acolwell: hadn't been notified of some comments 16:17:58 paul___irish has joined #html-wg 16:18:04 ... put saw when Kris posted to the pull request 16:18:48 paulc: next step is for Aaron to work with the critics and see what changes can be made 16:18:54 discussion of which email address should be used -- looks like Aaron was setup incorrectly 16:18:59 acolwell: ok -- did not know about the comments before 16:19:18 paulc: right -- I coped the folks sending comments and sent to you 16:19:27 Until the critic email notification is fixed we can just make sure to make a comment in github when their is a status change 16:19:33 ... like to assign an action item to you for this 16:19:37 acolwell: ok 16:20:21 ACTION: acolwell to Review the comments on proposed MSE test suites in two weeks 16:20:21 Error finding 'acolwell'. You can review and register nicknames at . 16:20:59 acolwell: resolution may take longer to figure out what the right behavior is 16:21:13 paulc: if you need help with github -- asl 16:21:19 s/asl/ask/ 16:21:37 Topic: CR bug status of MSE 16:21:41 pauc: 5 of these bugs are fixed 16:21:54 s/pauc: /paulc: / 16:22:06 paulc: aaron sent out "cyril draft" 16:22:24 ... going to second link in the email 16:22:36 ... Aaron summarizes long thread about this problem 16:22:40 tantek_ has joined #html-wg 16:22:48 ... some expressions of support for this direction 16:22:51 ... in email 16:23:37 acolwell: David Singers resposne talks about one of the requests 16:23:59 ... resolution for this I think is two remove some of the definitions MSE makes of language and tie on the track objects 16:24:10 s/and tie/and time/ 16:24:26 paulc: MSE proposed to make language and time mutable -- ie change in full flight 16:24:32 ... lots of push back on this 16:24:48 ... general conclusion is that those should be fixed during the track and should not change 16:25:09 ... applies to audio, text, anything 16:25:25 ?1: user can elect to change 16:25:39 acolwell: proposed changes is to remove the definitions from MSE 16:25:54 ... MSE will conform to what HTML5 spec says does not add text for this 16:26:09 ... if time needs to change within a track follow HTML5 guideline 16:26:19 ... think that means removing the track and adding a new track 16:26:29 zqzhang has joined #html-wg 16:26:52 ... second part -- one of orig. justifications is that time is not available in ISOBMFF file 16:28:16 ... third thing - MSE spec should be more clear around language and time 16:28:23 ... looking for input from David and others on how to change this MPEG spec 16:28:29 gavin has joined #html-wg 16:29:22 joesteele_ has joined #html-wg 16:29:39 pal: one #2 have a question 16:29:51 ... are you syaing this cannot be communicated via HTML5? 16:30:02 q+ 16:30:11 acolwell: no - saying we would defined boxes saying what the time attributes could be -- not communicated today 16:30:18 q+ 16:30:31 jinsong has joined #html-wg 16:30:48 pal: this might exist outside the ISOBMFF package? 16:30:57 acolwell: if so then the app has to deal with it 16:31:16 pal: then you are proposing to duplicate this rather than using it where is is today? 16:31:48 pal: is there another way of communicating that information so it can be reflect back to the HTML attributes? 16:32:05 acolwell: could probably define special docs? to do this 16:32:16 paulc: pierre is looking for an API solution 16:32:24 pal: trying to avoid having these boxes be a requirement 16:32:44 acolwell: making time immutable seems to be most natural - but that creates a problem 16:33:01 pal: would like to explore ways of doing this that do not require a new required box 16:33:17 q? 16:33:22 aizu has joined #html-wg 16:33:30 q+ 16:33:30 ack cyril 16:34:06 cyril: I proposed with CableLabs some extensions to the DASH manifest for new roles values that would map to HTML time 16:34:19 jdsmith has joined #html-wg 16:34:26 ... I think would be a good idea to carry the time in the MP4 format for WebVTT for example 16:34:48 ... I also agree with Pierre - maybe an API to set the time and language in some sort of constructor 16:34:53 tantek has joined #html-wg 16:34:59 ... not at just any time -- would be useful 16:35:05 ack markw 16:35:18 markw: the time needs to be in the manifest whatever manifest we use 16:35:28 ... needs to know when it is downloaded 16:35:37 ... could also be in the MP4 file but must be in the manifest 16:35:52 ... also agree that there is not need to change it after construction 16:36:04 ack BobLund 16:36:15 s/time needs to be/kind needs to be/ 16:36:23 BobLund: agree it should be in the manifest and should not be mutable 16:36:34 ... but not all media formats include thi sin-band 16:36:44 s/needs to know when/application needs to know before/ 16:36:49 glenn: if we add something to ISOBMFF need to add for other formats 16:36:58 ... seems to have been added by WebVTT folks 16:37:31 cyril: need to make my contribution public and then will send to the list 16:37:44 paulc: sounds like this was made to imply it is mutable at any time 16:37:54 ... but having a constructor to set this would be a good idea 16:38:14 niels_t has joined #html-wg 16:38:16 markw: have a chicken and egg problem - no point at which you can intercept construction of the track 16:38:32 cyril: but when your source buffer is single track this is possible? 16:38:58 acolwell has joined #html-wg 16:39:00 aaron: not sure what that buys us though 16:39:19 s/markw: have a /acolwell: have a / 16:39:29 s/aaron: /acolwell: / 16:39:38 paulc: sounds like we have concensus for #1 16:39:53 pal: #2 is not sufficient 16:40:17 paulc: #3 we need to get these changes made to HTML5 - and what she should do about it is the next step there 16:40:28 ... pal - you need to respond to this and continue the dialogue 16:40:29 q+ 16:40:37 ... we can get #1 and #3 started 16:40:46 JohnJansen has joined #html-wg 16:40:51 ... Aaron think that is enough for today 16:41:09 jernoble has joined #html-wg 16:41:15 acolwell: think we have concensus for #1 - is there an alternate proposed or should I just remove language? 16:41:33 paulc: I am ok with leaving the bug open with note about waiting for concensus 16:41:49 acolwell: since we are removing mutable language -- process issues? 16:41:57 paulc: worry about that later 16:42:13 .. .may be first of several items 16:42:36 ACTION: paulc to make sure HTML5 bugs filed for item #3 16:42:36 Created ACTION-243 - Make sure html5 bugs filed for item #3 [on Paul Cotton - due 2014-04-16]. 16:42:53 Topic: Last two items 16:43:11 paulc: Aaron publishers an editors draft that resolve 3 of the bugs - cyril should review 16:43:22 s/publishers/published/ 16:43:27 cyril: will review 16:43:40 Topic: Audio bytestream format 16:43:53 paulc: Aaron posted this in his email -- seemed to be some support 16:44:06 cyril: yes I was about to submit something for that also 16:44:25 s/Last two items/Editors draft/ 16:44:47 cyril: question about byte range format - would work as expecte din sequence mode but not in segment mode - correct? 16:44:59 acolwell: would act very similar 16:45:15 s/expect din/expected in/ 16:45:24 IanPouncey has joined #html-wg 16:45:24 cyril: will look more carefully then 16:45:56 paulc: if Aaron posts the link in that email you can contiue to provide comments 16:46:09 ... Aaron more to talk about? 16:46:30 acolwell: are people ok with me putting the spec in the registry? 16:46:39 paulc: any objections or more time needed? 16:46:49 ?2: would like to review 16:47:02 paulc: please add this to email 16:47:12 s/?2/jdsmith/ 16:47:18 s/?2: /jdsmith: / 16:47:55 pal: question about Aarons concern - is the concern that when you do addsourcebuffer, you don't know how many tracks will be created? 16:48:16 acolwell: application has not information to uniquely identify tracks, so would be hard for application to target tracks 16:48:20 pal: go it 16:48:45 paulc: reviewing email again -- 16:49:04 ... Aaron will hold of on making changes until more dialog about API possibilities 16:49:17 ... box format will wait for more feedback from David Singer 16:49:31 ... Cyril will review spec updates 16:49:41 ... Jerry will take time to review audio formats 16:50:23 Topic: EME discussion 16:51:22 scribe: krisk 16:52:18 rrsagent, generate minutes 16:52:18 I have made the request to generate http://www.w3.org/2014/04/09-html-wg-minutes.html plh 16:52:46 Meeting: HTML Working Group face-to-face 16:53:01 Regrets: Travis 16:53:09 We are going to be going through a number of EME Bugs 16:53:23 MarkVickers has joined #html-wg 16:53:25 See -> http://lists.w3.org/Archives/Public/public-html-media/2014Apr/0051.html 16:53:30 q? 16:53:33 ack ac 16:53:41 First bug is https://www.w3.org/Bugs/Public/show_bug.cgi?id=25199 16:53:55 EME should use promises 16:54:33 TOPIC: EME Should use Promises 16:54:46 Bug https://www.w3.org/Bugs/Public/show_bug.cgi?id=25199 16:55:06 Present: Mike, Eliot, PAL, adrian, Erika, MarkS, Jay, Bob, Kris, Robin, Jerry, Arnaud, Zhihang, Cindy, Neils, Cynthia, Glenn, plh, Sam, Paul, Tantek, Ted, Jer, David, Aaron, MarkW, Cyril, MarkV 16:55:13 Present+ Joe 16:55:25 Which Blocks: 17750 21798 24081 24216 24771. 16:55:28 Present+ Arnaud_Braud 16:56:00 plh has changed the topic to: HTML Working Group Face-to-face: passcode 26631 16:56:32 excellemente 16:56:45 All the bugs deal with async and promises are mechanism for async 16:57:10 At the last meeting April 1st people needed more time to think about using promises for this purpose 16:57:16 rrsagent, generate minutes 16:57:16 I have made the request to generate http://www.w3.org/2014/04/09-html-wg-minutes.html plh 16:57:32 The main bug has the proposed IDL change 16:57:52 mjs has joined #html-wg 16:57:54 Any feedback? 16:58:07 -cyril 16:58:14 joesteele: This is a good change and in the direction of the W3C tag 16:58:32 ...are other changes like this going to be made in HTML5? Or will it wait until 5.1? 16:58:56 darobin: New apis are expected to use promises 16:59:29 paulc: Others have been changed in last call/WD status even before promises moved out of DOM4 and into ECMA script 16:59:41 q+ 16:59:43 paulc: any objections? 16:59:52 ack adrianba 16:59:53 ack adrian 17:00:18 adrianba: This is a good direction and change to make, but I have some detail questions 17:00:36 ..for example I'm not sure how the promise works with the release method 17:00:45 ..it's not clear when the promise completes 17:01:08 ..The best approach maybe to make this change and then itterate on the details that comeout 17:01:31 ddorwin: Yes I added a comment in the bug about this. 17:01:37 paulc: Room agrees 17:01:38 Present+ Prabhakar_Goyal 17:01:45 Present+ JohnJansen 17:01:56 Present+ Sean_Snider 17:01:58 paulc: I'm concerned about not discussing the other bugs that are blocked 17:02:02 * Hi johnjan! 17:02:47 jdsmith: We have all replied back to these bugs 17:03:18 paulc: What I am asking for when is the next meeting and with enough next steps to know the overall status of the next meeting 17:03:45 paulc: Maybe these 'blocked' bugs can be addressed or have progress on once the main bug is addressed (25199) 17:03:46 q+ 17:04:00 ddorwin: Some of these may just be fixed or need minor changes 17:04:35 paulc: Once the root bug is fixed can you send something to the TF on what needs to be done with the other bugs (maybe close/duped by the root bug) 17:04:48 Action: ddorwin 17:04:54 dauwhe has joined #html-wg 17:05:41 Action: ddorwin to fix the main bug and propose a direction for the other 5 blocker bugs 17:05:41 Error finding 'ddorwin'. You can review and register nicknames at . 17:05:48 +[Microsoft] 17:06:05 Zakim, Microsoft has JohnJansen 17:06:05 +JohnJansen; got it 17:06:29 joesteele: Some of the bugs may not be fixed... 17:06:54 Bug 17750, Bug 24216 17:07:31 paulc: The right think to do is send an email that even with the async change these bugs won't be addressed 17:08:03 joesteele: OK 17:08:53 adrianba: I wonder if we can have this discussion now about these bugs 17:08:58 joesteele Sure 17:09:26 joesteele: Let discuss and email on the list 17:09:34 rubys2 has joined #html-wg 17:09:55 http://lists.w3.org/Archives/Public/public-html-media/2014Apr/0004.html 17:10:30 joesteele: The issue I'm trying to raise here - a session is composed of licenses and keys 17:10:46 ..Load session and release assume a single content key 17:11:11 joesteele: You can deliver keys at a higher level that a specific content stream 17:11:38 ..if you impl release/session on a lower level it can impact a higher level 17:11:55 https://docs.google.com/drawings/d/128iTMqVgI3gCPo7q1mB2RIq-iCV3og0FMfVlY0mRWOg/edit?usp=sharing 17:12:09 this is the diagram I was talking about 17:12:45 joesteele: This is from a number of DRMs 17:13:08 joesteele: It more complex - device, player, content and wrapper keys 17:13:26 ...The spec needs to allow the CDN manage these keys 17:13:40 The app need to just know about two keys 17:14:14 pal has joined #html-wg 17:14:16 ...Mark has talked about an app releasing a specific key - so that a movie can then be played on another device 17:14:40 paulc: These are really about the API and not about the async 17:15:05 joesteele: Yes this orthogonal to the async bug 17:15:20 paulc: do we have a specific bug that covers supported a differenet model 17:15:39 ddorwin: I'm not aware of such a bug 17:15:57 This is the bug -- https://www.w3.org/Bugs/Public/show_bug.cgi?id=25218 17:15:58 joesteele: Bug 25218 is close but nor complete 17:16:09 s/nor/not/ 17:16:34 paulc: Is this email linked to bug #25218 17:17:03 ddorwin: The goal is to make various systems interoperable 17:17:07 https://www.w3.org/Bugs/Public/show_bug.cgi?id=25218 17:17:16 ...alot of other ways exist 17:17:28 ..but EME is generic and simple 17:17:37 ..the model is session based 17:18:08 ..What happens if you load a key from another sessions, you should not do this... 17:18:22 ..I understand the domain thing, but I don't think it's interoperable 17:18:49 ..Likewise if it's built to support a specific device it won't work on other devices 17:19:01 q+ 17:19:05 ..I'm worried that do this change will cause more interop issues 17:19:11 q+ 17:19:23 ..We should fix the common case and then move to some other complex cases 17:19:36 ..For example web crypto.. 17:19:46 ack joe 17:19:54 q+ 17:19:56 niels_t: We do see limits in EME 17:20:08 +q 17:20:13 ..allowing the CDM to contact the license server directly 17:20:19 ..intitlal for legacy 17:20:30 ..but now we see additional use cases (init) 17:20:39 ..could be allowed by this change 17:20:54 q+ 17:20:54 ..it could be more of a conceptual change in the abstract 17:21:01 q+ 17:21:03 ack niels 17:21:15 ack glenn 17:21:29 glenn: To the comments about supporting exist solutions 17:21:42 q+ 17:21:47 ..EME came about to support existing systems is an implicit goals 17:22:24 ..from cox's perspect we do have intrest in various legacy systems (adobe, microsoft, etc.) would be a major issue for adopting EME 17:22:27 ack pal 17:22:54 pal: At a very high level, encrypted media comes in, but I have a CDM 17:23:04 ..I get a key and decrypt 17:23:20 ..or a few others, so I create a connection to the CDM 17:23:27 astearns has joined #html-wg 17:23:43 ..CDM can make a call to get the right keys to the client 17:24:07 ..This part doesn't really matter - how the keys get created by the CDM 17:24:20 ..I don't understand how this impacts apps 17:25:26 ddorwin: It comes down to wanting to release a single key driven by the app and impact the whole session 17:25:43 pal: doesn't the api support this? 17:25:56 joesteele: But this starts all over 17:26:02 q+ 17:26:28 ..I'm done releaseing the license for a movie the only way is to release them all 17:26:31 rniwa has joined #html-wg 17:27:28 ddorwin: joe wants to release some but not all keys 17:27:47 joesteel: The CDM can tell the app to release specific keys 17:28:06 ..The spec says to release all keys 17:28:15 pal: I'm just trying to understand 17:28:28 ddorwin: I don't think the spec states this.. 17:28:34 others agree in the room 17:28:53 glenn: But the app has no 'hints' 17:29:04 pal: The current spec doesn't block this.. 17:29:43 pal: are we missing arguments in the release call itself? 17:30:13 boblund: If the you want to persist some information then the CDM needs some information 17:30:44 ddorwin: Their is ambiguity in this and they exploit this ambigutiy we have interop issues 17:31:08 ..We are seeing this in real places that breaks interop 17:31:34 ..This is even using the simple model that makes a Chrome, Microsoft and Adobe app not work when they should 17:31:36 q+ 17:31:44 dauwhe has joined #html-wg 17:31:47 q+ 17:31:50 ack joesteele_ 17:31:59 ack dd 17:32:16 ddorwin: I want to point out that it's not just about API compliance, it's about the behaviour you get 17:32:38 ..So we need to not have this ambiguity 17:33:03 +q 17:33:11 ..I have seen in production this breaks interop and solve behaviour compliance and not just the API compliance 17:33:17 ack markw 17:33:43 markw: I think that ddorwin if correct that adding complexity is the way to go 17:33:56 s/adding/removing/ 17:34:04 my goal is to *hide* the complexity not to expose it 17:34:51 markw: The whole point about EME was to make this easy and simple which will address interop on various devices 17:35:08 I agree with what Mark said above. 17:35:30 ack bob 17:35:47 boblund: I agree with markw that EME should make things as simple as possible 17:36:09 boblund: But if we don't suport uses cases that are used today we are not going to get broad adoption 17:36:13 ack niel 17:36:46 niels_t: from my analysis side channel communication will help interop and enable broad adoption 17:37:37 ..I don't know the limits where a specific interop issue will arise with side channel 17:38:07 ddorwin: This won't work with current EME and impacts privacy and security (CORS) 17:39:16 ddorwin: part of the spec process is to respect normal web security and privacy 17:39:18 ack glenn 17:39:40 glenn: On a release issue - release is only advisory issue, correct? 17:39:47 ddorwin: correct 17:39:51 gitbot has joined #html-wg 17:39:51 [13html] 15darobin pushed 1 new commit to 06CR: 02https://github.com/w3c/html/commit/043fcbf6006a8c540aedd8dad0a6cf57408bab07 17:39:51 13html/06CR 14043fcbf 15Robin Berjon: trailing comma in enum SelectionMode... 17:39:51 gitbot has left #html-wg 17:40:11 glenn: So adding a hint doesn't seem to increase ambiguity 17:40:14 gitbot has joined #html-wg 17:40:14 [13html] 15darobin pushed 1 new commit to 06master: 02https://github.com/w3c/html/commit/6af16dbb6b11ba3ba71a8696707ae78eaff62726 17:40:14 13html/06master 146af16db 15Robin Berjon: trailing comma in enum SelectionMode 17:40:14 gitbot has left #html-wg 17:40:38 glenn: since we have not speced the UA to CDM nothing is preventing the UA to create issues 17:40:42 MarkVickers has joined #html-wg 17:40:47 ..maybe it's not a problem between CDM and UAs 17:40:54 q? 17:40:56 ..I think their are options here 17:41:14 pal: I'm trying get to the actual spec, let's talk about release 17:41:24 ..is their a problem with release as spec'd 17:41:49 joesteele: Yes it needs to be more specific 17:41:56 pal: It's spec'd as a hint... 17:42:22 joesteele: I have seem that this has become more than a hit and impacts a CDM 17:42:30 ack joe 17:42:31 s/hit/hint/ 17:42:43 ack pal 17:43:01 joesteele: The last thing I wanted to point out was that adding support for domains increase complexity 17:43:40 joesteele: We just need text in the spec that either says this is OK or gets specific 17:43:51 ..leaving this in the domain in the CDM 17:44:26 paulc: are their any specific bugs to change the release method? 17:44:35 ..Because I don't see them.. 17:44:48 joesteele: Not in the bug just in the email 17:45:45 paulc: Let's try to continue on the agenda and assume when we get to the related bug later to skip over since we had a good discussion about this issue 17:45:55 rrsagent, generate minutes 17:45:55 I have made the request to generate http://www.w3.org/2014/04/09-html-wg-minutes.html krisk 18:00:12 Mick_Hakobyan has joined #html-wg 18:01:02 q: 18:01:05 q? 18:04:03 TOPIC: Bug 25267 - Remove ability for in-memory sessions to be re-used 18:04:10 https://www.w3.org/Bugs/Public/show_bug.cgi?id=25267 18:04:34 paulc: are the dependancies correct? 18:05:09 ddorwin: It's to deal with interop issues 18:05:23 dorwin: I think we need to have more consistent behaviour 18:05:46 ..when doing adaptive streaming you can get the same keys, over and over 18:05:53 ..which will create new media sessions 18:06:12 ..So this text was added to just re-use an existing session 18:06:32 Paulc: is related to 25268? 18:07:05 ddorwin: I'd like to find a new way other than this bug..basically if we fix bug 25268 it should resolve this issue 18:07:40 pal: can we bring up the text? 18:08:13 ddorwin has joined #html-wg 18:08:34 25267 is referring to the Otherwise branch of step 10 of https://dvcs.w3.org/hg/html-media/raw-file/default/encrypted-media/encrypted-media.html#dom-createsession 18:09:20 ddrobin: basically remove all of the checks... 18:09:35 ..or maybe refered to in the normative note 18:10:19 adrianba: I think it's section 6.2 18:10:45 MarkVickers has joined #html-wg 18:11:25 q+ 18:11:50 ack joe 18:11:55 ddorwin: I agree with adrianba (other than what we discussed earlier) 18:12:11 joesteele: I need more clarity 18:12:23 ddorwin: You would always expect a message to be fired 18:12:35 pal: TO understand the specific 18:12:45 ..step 10 would be changed? 18:13:11 paulc: no in step 6 is where it will get done 18:13:28 q+ 18:13:47 adrianba: yes, at the end in step 10 you can move to ready 18:13:51 BobLund has joined #html-wg 18:13:58 ..basically you don't need to fire a message 18:14:19 ..so step 6 part 2 make this required 18:14:37 pal: request variable, what is the variable type? 18:14:51 adrianba: the message attribute has this information 18:15:09 pal: the proposal is to always fire the message, but could be null 18:15:39 adrianba: could be an empty array 18:16:55 adrianba: I think having empty messages could cause more interop issues 18:17:09 ddorwin: I agree with adrianba 18:17:20 joesteele: I don't here is whay.. 18:17:24 s/whay/why/ 18:17:40 one case is that the device has the key and not need to make a request 18:18:20 ddorwin: This is not interoperable 18:18:40 joesteele: I like the way the spec is today.. 18:18:51 paulc: what should we do with these bugs? 18:19:43 ddorwin: I know what I'd like to do with these bugs... 18:19:58 ...not take this change and accept 25268 18:20:25 adrianba: I don't understand why making firing the event optional makes writitng apps harder 18:20:34 ddorwin: This came from app devs... 18:20:55 ddorwin: I'd like to solve the overall problem and then this goes away 18:21:24 pal: Do we have specifics from an app dev why making this change makes it easier 18:21:59 ddorwin: putting the app in control - maybe they want a new session is lost with this change 18:22:20 paulc: so their is no symetry 18:22:40 adrianba: why would you want this?? 18:23:44 pal: is it that the app started a new session and didn't get a new key from the cdm 18:23:51 ..on the new session? 18:24:03 ddorwin: yes that is what was presented to me 18:24:05 q? 18:24:33 ddorwin: it's really up to the CDM 18:24:52 joesteele: It really is that the CDM may or maynot provide a key 18:25:16 ..maybe add another flag? 18:25:30 ddorwin: I'd rather move to the next bug which will fix this issue 18:25:59 paulc: will the editors take on these bugs? 18:26:12 adrianba: we have not reached concensus on 25267 18:26:26 ..and have not discussed 25268 to set the scene 18:26:49 with 25268 ddorwin is describing a problem we have discussed a few times 18:27:05 https://www.w3.org/Bugs/Public/show_bug.cgi?id=25268 18:27:06 ..basically you end up with multiple net requests... 18:27:32 ..it doesn't sound like this woudl be a complete fix 18:27:56 ddorwin: 25268 is the biggest issue for EME app devs.. 18:28:13 Bug 25268 - Reduce the burden on applications to dedupe initData from 18:28:37 ddorwin: what is an app to do? simplest is to ignore but is key system specific 18:28:49 ..the goal is to allow the app to know what to do... 18:29:04 ..The previous misses some cases 18:29:15 ...It pretty complex for an app to deal with.. 18:29:24 ..and might break down with key rotation 18:29:52 ..even in the previous bug you'll end up with hundreds of sessions which is not good 18:30:14 Review previous bugs related to this: (bug 16553, bug 19208, bug 21855) 18:30:20 paulc: Please review the old bugs listed in 25268 18:30:44 TOPIC: Bug 25269 - Add a container-independent initialization data type for 18:30:54 see https://www.w3.org/Bugs/Public/show_bug.cgi?id=25269 18:31:22 ddorwin: nothing fundemental says that the keys must come from the media 18:31:54 ..basically it's container independent structure for keys or psh systems 18:32:18 ..the license request should not be restricted by a container format 18:32:20 q+ 18:32:36 ..simple just need to make it accessible via javascript 18:33:01 ..herry was asking why psh's are even needed? 18:33:24 See historical email about PSSHs: http://lists.w3.org/Archives/Public/public-html-media/2013May/0018.html 18:33:29 rrsagent, generate minutes 18:33:29 I have made the request to generate http://www.w3.org/2014/04/09-html-wg-minutes.html plh 18:33:44 ...but this is ortho to this issue 18:33:50 ack joe 18:34:01 joesteele: The reason I brought this up - not that this is a bad idea 18:34:24 joesteele: How would one support this for content that exists 18:34:43 q+ 18:35:05 ..the only mechansim for how I would support tihs would be to make a new request and I would get the actual psh 18:35:21 ..which leads to what is in the session, since thie psh is now part of the session 18:35:46 ..It's not a bad idea but I don't see how this would work for DRM's that use pshs 18:36:02 ddorwin: This is part of accepting using EME 18:36:16 joesteele: This is fundemental to how DRM exists today 18:36:43 ddorwin: If an app wants to do this then their key systems needs to support this but it's not required. 18:36:56 ..We are not replacing PSHs 18:36:57 mjs has joined #html-wg 18:37:22 ..adrianba has a nice change in the spe 18:37:24 initDataType registry: https://dvcs.w3.org/hg/html-media/raw-file/default/encrypted-media/initdata-format-registry.html 18:37:26 s/spec/spec/ 18:38:08 We would add a new item but all of these are optional, just like webm or cenc 18:38:22 paulc: any more need to discuss 18:38:28 q? 18:38:41 joesteele: doesn't seem to do damage but doesn't seem to support my DRM system 18:38:48 joesteele: what is missing? 18:39:12 ..we would need to have more information in the session 18:39:23 ddorwin: you can do this today 18:39:49 q? 18:39:51 ack ad 18:40:06 adrianba: The one question I had was the for the other intitData types, we talk about how they get called 18:40:22 ..is this just for call createsession with? 18:40:51 q+ 18:40:53 adrianba: it sounds like a good solution when you get keys from a manifest 18:40:59 ..so it seems reasonable 18:41:10 ddorwin: only need to figureout the best format 18:41:15 ack niels 18:41:18 neils 18:41:50 neils: To support joe's view we have simalar need to persist the pshs 18:42:14 s/PSHs/PSSHs 18:42:14 TOPIC: Bug 25092 - Need a way to inform script that resolution restrictions 18:42:26 https://www.w3.org/Bugs/Public/show_bug.cgi?id=25092 18:42:33 Looks like Mark responded 18:42:43 paulc: what is the next step here 18:42:53 ddorwin: We don't have a good use case for this issue 18:43:07 https://www.w3.org/Bugs/Public/show_bug.cgi?id=25092#c8 18:43:11 https://www.w3.org/Bugs/Public/show_bug.cgi?id=25092#c9 18:43:17 q+ 18:43:51 markw: I'm looking right now.. 18:44:11 pal: we discussed this in the past that was simalar 18:44:30 ..for example some css transformation may not be available 18:44:52 ..seems like we don't have a way to inform the app what is available, permitted or not permitted 18:45:36 glenn: no real way to do this in general - some terrible poor hueristics 18:46:05 markw: the multiple key thinks looks like a hack 18:46:26 s/We don't have a good use case for this issue/We don't have an agreed upon solution for this issue/ 18:47:39 paulc: we'll just continue the dialog in the bug, please add your comments to the bug 18:47:54 TOPIC: Bug 25200 - Add optional "licenseType" parameter to createSession() 18:48:07 https://www.w3.org/Bugs/Public/show_bug.cgi?id=25200 18:48:12 See clarification in https://www.w3.org/Bugs/Public/show_bug.cgi?id=25200#c6 18:48:36 ddorwin: I was going for the normal streaming case as well as persisted (offline on a plane) 18:49:01 q+ 18:49:13 ddorwin: app needs to tell drm what it wants - save to play later (offline) for example 18:49:31 ddorwin: The others are TBD or other session types... 18:49:59 paulc: we have a long email thread, is the related? 18:50:26 q+ 18:50:29 ddorwin: I tried to clarify that I am trying to solve the offline case, though other cases are being discussed 18:50:56 ..I'm trying to get back to the main use case and then from their we could potentially build on the enum 18:51:05 ..to support other use cases 18:51:12 q+ 18:51:18 ack pal 18:51:20 ack joe 18:51:30 ack markw 18:51:44 ack ad 18:51:53 q+ 18:52:04 q+ 18:52:41 adrianba: The message signature - I'd like a dictionary, since I'm worried we need to add another para later 18:52:54 s/para/param/ 18:53:22 ddorwin: the point of this is to make it obvious so as long as the dictionary is specific 18:53:25 ack joe 18:53:54 q+ 18:54:00 joesteele: I wanted to add one more, I'm more conserned about persistance to not keep request access 18:54:20 ..but I do support the dictionary proposal from adrianba 18:54:48 ack mark 18:55:16 ddorwin: The type may have more information if it's persisted or no (flags) 18:55:37 markw: will the server need do anything differenent? 18:55:46 ddorwin: I'm aware of two cases... 18:56:12 joesteele: if it's an open device (kiosk) the app may want to NOT persist stuff 18:56:27 rubys has joined #html-wg 18:56:37 joesteele: it's really about providing a hint 18:57:03 ddorwin: the goal is to allow an app to make a specific request 18:57:17 ddorwin: multiple systems have this in the request today 18:57:26 q+ 18:58:18 Markw: asking question... 18:59:11 markw: I don't disgree with the proposal, but I don't think in your case we want to use the persistance 18:59:36 markw: it might be temporary so you can actually persist this information 18:59:39 ddorwin: yes 19:00:22 jernoble has joined #html-wg 19:00:45 s/so you can actually persist this information/but you my still have a persistent session even though the license and keys were temporary/ 19:01:23 paulc: Lets' see if we can talk about content editable during the IAB talk from 14:00 -> 15:00 19:05:09 paulc: We need to discuss when EME TF wants to meet - maybe next tuesday 19:05:26 dorwin: we need people to respond first to make session 19:05:46 paulc: maybe the EME folks can meet today and work on these issues working F2F 19:06:50 room agrees to take advantage of F2F to discuss more about these EME issues and make more progress 19:07:09 paulc: It would be great to take simple notes and send to the group 19:07:36 We are now breaking for lunch and will meet back at 13:00 (DOM4 stuff) 19:08:52 gitbot has joined #html-wg 19:08:52 [13validator] 15sideshowbarker pushed 2 new commits to 06master: 02https://github.com/validator/validator/compare/6d683741370f...ce09a2bf571e 19:08:52 13validator/06master 144bf9182 15Michael[tm] Smith: Simplify the default version string for the CLI. 19:08:52 13validator/06master 14ce09a2b 15Michael[tm] Smith: For warnings, "Bad value"⇒ "Potentially bad value" 19:08:52 gitbot has left #html-wg 19:11:02 q? 19:11:06 queue= 19:41:04 mjs has joined #html-wg 19:50:56 rubys has joined #html-wg 20:01:34 cyns has joined #html-wg 20:01:46 scribe: cyns 20:02:00 abarsto has joined #html-wg 20:02:03 aizu has joined #html-wg 20:02:25 https://www.w3.org/html/wg/wiki/HTML5.0AtRiskFeatures#DOM4_Features_at_Risk 20:03:11 TOPIC: DOM 4 test results and features at risk 20:03:44 Elements interface (whole section), query/queryAll 20:03:44 ArrayClass extended attribute 20:03:44 append/prepend 20:03:46 before/after/replace 20:03:48 MutationObservers 20:04:07 robin: we have a small set of features at risk. 20:04:25 krisk has joined #html-wg 20:04:39 zqzhang has joined #html-wg 20:05:12 robin: I"m not sure that these aren't supported, but I'm sure that we don't have enough tests to prove it 20:05:21 robin: the first 2 are known failures 20:05:30 robin: the last 3 are new things where we don't have enough tests 20:05:38 Based on analysis of: http://w3c.github.io/dom/test-results/less-than-2.html 20:05:48 Test files with failures: 43; Subtests with fewer than 2 passes: 1719; Failure level: 1719/47132 (3.65%) 20:06:33 robin: I tried to err on teh side of including things in the at-risk list, so we are as safe as possible. 20:06:41 http://w3c.github.io/dom/test-results/less-than-2.html#test-file-36 20:06:47 robin: if we test and they pass, we just keep them 20:07:02 robin: less than 2 list has not changed since yesterday. 20:07:16 robin: most are idl, many others are corner cases. 20:07:29 Majority of failures are IDL failures whch we need to filter out to explain. 20:07:58 robin: overall test results are pretty good 20:08:26 pc: keeping track of our 10 different documents that express status 20:08:37 MutationObservers is implemented in all browsers 20:08:38 https://developer.mozilla.org/en-US/docs/Web/API/MutationObserver?redirectlocale=en-US&redirectslug=DOM%2FMutationObserver 20:09:03 Unlike the prepend and append https://developer.mozilla.org/en-US/docs/Web/API/ParentNode 20:09:04 pc: robin was to prepare a candidate cr, with changes to red text. we didn't set a date for that 20:09:19 q+ 20:09:24 pc: we proposed a min length of 30 days for cr. we also identified 5 items at risk 20:10:03 pc: we also need to have a meeting with the director. when do we want to do that, and do we want to do them together? 20:10:27 robin: don't think we need to coordinate publications, but a single meeting would be ok. 20:10:38 pc: a phone call with Ralph may be enough 20:11:11 pc: I will also send an announcement to the chairs list 20:12:20 pc: will you do a page, like we have for canvas, that explains the bad results? 20:12:41 robin: yes 20:12:48 ACTION: Robin to draft a page explaining the failures in the DOM test suite 20:12:48 Created ACTION-244 - Draft a page explaining the failures in the dom test suite [on Robin Berjon - due 2014-04-16]. 20:13:19 kris: the features at risk, mutation observers are in a different class than append and prepend 20:13:26 plh: class? 20:14:01 kris: I don't think any browsers support append/prepend. we have some tests for mutation observers, and mozilla has an implementation 20:14:26 kris: if you write a test for mutation observers, you may find it exists. not so for append/prepend 20:15:11 ACTION: krisk to submit mutation observer tests to webplatform 20:15:11 Error finding 'krisk'. You can review and register nicknames at . 20:15:58 trackbot, list users 20:15:58 Sorry, plh, I don't understand 'trackbot, list users'. Please refer to for help. 20:16:31 pc: when can you give us the draft document 20:16:35 robin: in a couple weeks 20:16:46 ACTION: kris to submit mutation observer tests to webplatform 20:16:47 Created ACTION-245 - Submit mutation observer tests to webplatform [on Kris Krueger - due 2014-04-16]. 20:17:42 TOPIC: content editable 20:17:50 scribe:jaymunro 20:18:20 http://oksoclap.com/p/extensible_content_editing 20:18:55 adrianb at the extnesible web summit break out session 20:18:59 editing in general 20:19:14 what'll improve operablity. high level point of view 20:19:36 content edited should be done in detail, so all browser could do it the same 20:19:56 other - not necessary to do the same results in all browsers 20:20:25 Doesn't think that kind of precision is necessary 20:21:04 because of bugs in browsers, differences, there isn't good interop here. Most editing libs try to override all the browser does for you. 20:21:14 editors do it themselves. 20:21:22 s/operablity/interoperability 20:21:24 rrsagent, generate minutes 20:21:24 I have made the request to generate http://www.w3.org/2014/04/09-html-wg-minutes.html paulc 20:21:30 q+ 20:21:37 some wanted rich html, some wanted different styles, etc... 20:21:49 discussed creating a new content editable. 20:21:55 very basic 20:22:32 last thing, had a good discussion about improving selection api. Robin mentioned overlap with webaps 20:22:43 Microsoft thinks it's key to the browser. 20:22:53 bi directional, consistent selection 20:23:02 like to focus on the selection API. 20:23:18 robin: the selection API is in web apps 20:23:25 the content editable cojuld go in HTML 20:23:45 ade: the editing command would work better on a range. 20:23:52 s/cojuld/could/ 20:24:05 robin; contentent edita ble = basic, would this work better. 20:24:07 ade: 20:24:15 we didn't spend time drilling down 20:24:34 from my perseptive the more basic ediable, it disables the intgeraction peices. 20:25:00 s/intgeration/interaction 20:25:27 discussion of whether pressing enter, what does it do. 20:25:49 s/contentent edita ble/content editable 20:25:55 what should hitting enter i- n a time element. 20:26:38 robin: web frameworks, feedback went 90%. composing characters can be wrong, customers just says give us events. 20:27:17 cyn: some people want full rich editor to do everything. people just want a tag for a rich editor 20:27:41 confusion on what basic means 20:28:07 ack me 20:28:26 ack krisk 20:28:37 pc: are we talking about having work split between working groups 20:28:56 robin: how much work is needed, how much work is needed for content editable 20:29:23 ade: feels to me that we should serialize the work. solving for selection api, will give us the frame work for how to change editing 20:29:37 my point was more about a simple rich text editor that covers the simple cases, like blog posts and comments, that web authors could just drop in with an element, and not have to code. 20:30:06 and that such and element would be wired up to accessibility api, and also create clean markup 20:30:12 pc: do we need a report back for webaps? 20:30:22 robin: no, we don't need extra coordination. 20:30:30 doing them one after the other is good 20:30:44 we don't need to do anything on the HTML front yet 20:30:56 cyn: is there any support in 5.1 and later ? 20:31:31 ted: a lot of the content editable, they want the controls fit in with the adds. there's a challenge to design the controls. 20:31:36 we did ok for video controls. 20:32:17 ade: almost everybody has diff requirements, like blog comments, what styles, use css, etc? 20:32:28 even for similar cases they have diff req.. 20:32:59 ted: it worth considering that platform feature set, where content editing gets used heavily, 20:33:25 cyn: what Im thinkinmg about is not fancy, for the people who don't need to go searching for controls. 20:33:53 robin: it would be good to have a rich text area, like text area, 20:34:53 robin: even for trivial cases, like linking - a lot of small subtlities. need someone comes to ta ble with a good description 20:35:21 ade: we need a web component for this, if it satisfied it requirements, then we'll see if it goes into the platform. 20:35:56 ted: I'd extend my worry to the basic set, we don't want to make authors redo stuff. 20:36:55 mark: i could see dev doinig a markdown for a user. 20:37:12 rrsagent, generate minutes 20:37:12 I have made the request to generate http://www.w3.org/2014/04/09-html-wg-minutes.html paulc 20:38:02 robin: the advangtage over the min model over current model,- 20:38:20 some users using the json model to create markup 20:39:28 Topic: HTML5 Features at risk 20:39:32 scribe: plh 20:39:34 robin: the substance.io people use a nicer MVC approach that doesn't mix editing the view with editing the model 20:39:41 Paul: appcache, we keep 20:40:00 ... dialog, details, sumary, not decided 20:40:13 ... color, keep 20:40:22 ... we're on datetime ow 20:40:27 s/ow/now/ 20:40:35 https://www.w3.org/html/wg/wiki/HTML5.0AtRiskFeatures#HTML_5.0_Features_at_Risk 20:41:37 Robin: I have a proposal 20:41:54 ... things to remove, things to keep at risk 20:42:43 ... DataCue, we don't have tests 20:42:55 Glenn: it's not in webkit or blink 20:43:05 ... I'd prefer it to be at risk 20:43:47 Mike: it's likely that DataCue will change 20:44:11 plh has left #html-wg 20:44:20 plh has joined #html-wg 20:44:37 Glenn: some features from texttrackcue attribute 20:45:49 ... were removed and, in response, datacue was added 20:46:14 Robin: the feature can be removed easily 20:46:41 Ted: i'll write a proposal to modify datacue 20:47:07 Robin: details and summary should be killed 20:47:19 Sam: Steve Faulkner that implementation don't match the spec anyway 20:47:28 Robin: dialog? 20:47:41 ... it's in a semi disrepaired state 20:47:59 Mike: they're still working on it 20:48:14 Ted: lots of questions around it, like focus management 20:48:39 Robin: we don't have implementation at all for it 20:49:19 ... ok dialog will be removed 20:49:34 also: dialog should go into an extension spec rather than 5.1 20:49:40 Robin: :die, :invalid, :valid 20:49:48 s/die/dir/ 20:50:30 Robin: firefox does valid and invalid 20:50:39 ... no one does :dir 20:50:57 http://www.w3c-test.org/html/semantics/selectors/pseudo-classes/valid-invalid.html 20:51:56 Robin: let's drop :dir, and keep :valid, :invalid for the moment 20:52:02 plh has left #html-wg 20:52:08 plh has joined #html-wg 20:52:15 MDN has a nice example that seems to work fine in a few browsers 20:52:15 https://developer.mozilla.org/en-US/docs/Web/CSS/:invalid 20:52:16 e.g. the WebKit bug is marked RESO FIXED https://bugs.webkit.org/show_bug.cgi?id=27357 20:52:20 Tantek: I thought we had interop on valid and invalid btw 20:52:45 Robin: iframe/seamless 20:52:48 I agree with tantek... 20:53:21 Sean: it's tough to implement. I would move it out of 5.0 20:53:29 ... it needs more work and use cases 20:53:36 here is our valid/invalid test drive; http://ie.microsoft.com/testdrive/HTML5/Forms/ - click on New PseudoClasses tab 20:53:42 ... I don't see how we can use this effectively 20:53:54 Robin: Chrome removed it 20:53:58 Gecko bug for iframe seamless: https://bugzilla.mozilla.org/show_bug.cgi?id=631218 20:54:31 Ted: safari supports it 20:54:38 no one minuted paul? 20:55:01 Mike: the other feedback is that it doesn't match the needs fro the devs 20:55:13 Tantek: candidate for extension spec 20:55:16 Sean: agree 20:55:43 Robin: I'm ok for extension spec, but someone needs to pick it up 20:56:22 iframe/seamless is out 20:56:43 re: :invalid and :valid pseudoclasses, they seem to work fine for me in Safari 7: http://trac.webkit.org/browser/trunk/LayoutTests/fast/css/pseudo-invalid-001.html?format=raw 20:56:48 Robin: isContentHandlerRegistered/isProtocolHandlerRegistered aren't implemented 20:57:16 ... ok removed 20:57:27 Robin: input times+ 20:57:38 Tantek: date ok? 20:57:42 Robin: yes 20:58:12 hober, that works in IE11 too 20:58:28 Tantek: don't understand why datetime doesn't have interop 20:58:41 wwu has joined #html-wg 20:59:13 Robin: we could put it at risk and keep time only 21:00:08 plh no I said don't understand why *time* doesn't have interop 21:00:20 s/datetime/time/ 21:01:22 [short interrupt] 21:01:31 tantek: it's also useful to keep input type=time as that then provides developers with a building block, along with input type=date, to build their own composite datetime UIs 21:02:46 scribe:jaymunro 21:03:08 TOPIC: IAB 21:03:30 wuwei has joined #html-wg 21:03:47 presenting: chris mejia IAB, sean snider yahoo, prabhakar goyal, microsoft. 21:03:57 See http://lists.w3.org/Archives/Public/public-html/2014Apr/att-0036/IAB_HTML5_Security_Extension_Proposal.pdf 21:04:13 chrisM: here with sean and prabhaker. 21:04:29 brief intro what IAB isd 21:04:34 s/isd/is 21:05:01 agenda: intro, use case, safeframe over view, html5 sandbox/csp, next steps 21:05:33 Interactive Advertising bureau 21:05:47 membership of online media companies 21:06:02 only ad group just digital 21:06:07 over 600 members 21:06:24 86% of ads in us are on IAB membersites 21:06:59 our interests - we develop digital ad standards 21:07:22 IAB recently part of W3C 21:07:39 ad content served from 3rd parties in real time 21:07:48 concerned with site and user security 21:07:51 dsinger has joined #html-wg 21:08:16 most web content is paid ads, they belive in the free web (ad paid) 21:08:40 Prab: use case real time content serving 21:08:45 showing a diagram, 21:09:09 common case : goes to ad serverf 21:09:22 s/serverf/server 21:10:09 browser calls exchange, calls ad server, if no ad, returns. if ad served, advertiser are sent to be bid on, highest bidder wins 21:10:31 the publisher doesn't know what ad content is 21:10:54 you can't use a black or white list to control content. 21:11:02 publisher areas of concern: 21:11:20 isolation, separation between publsher and 3rd party 21:11:49 ad tag is usually a script. always done that way, sometimes an iframe 21:12:07 (intro into SafeFrame) 21:12:16 no way to monitor scripts in real time. 21:12:41 looking to control data leakage, content, cookies, data 21:12:48 prevent js and css collision 21:13:09 but allow rich interactions with out providing full access (covered by safeframe + iframe 21:13:25 controls auto play, restricts certain media types 21:13:38 allows rich interaction without full access. 21:13:59 Ability to control other attack surface areas - prefent downloads 21:14:39 sean: use case - Safe frame - a cross domain iframe 21:15:12 where we stick the content, but wrap it with a javascript library, each frame defines a lib the content can talk to 21:15:14 lgombos has joined #html-wg 21:15:37 host decides whether actions are takein when iframe request info. 21:15:55 agnostic domain - hosts a base level doc. 21:16:37 some data sharing - events from browser , we send msgs to iframe - 21:17:17 SafeFrame APIs - agnostic origin, every safe fram e is in the same origin, talk to each other, but not top level 21:17:38 display ads are snippets of html, freeform js and html. 21:17:47 alwyas delivered with script or iframe. 21:18:00 s/alwyas/always 21:18:32 safeframe will let them show a display ad, it just works, doesn't need changes. 21:18:57 adrianba has joined #html-wg 21:19:14 host creates an safeframe iframe, handles interaction between host and server. 21:19:36 HTML5 sandbox - similar to safeframe. 21:20:07 sanbox attributes are too coarse grain, additional areas of control that publishers want 21:20:38 IAB wants enhancements to allow finer controls, ie ability to restrict 21:21:38 safe frame sets up xdomain plus csp- can't whitelist individual content, but can restict certain plug ins, or downloads (eg) 21:22:40 showed a list comparing safeframe, sandbox, and csp 21:24:00 things like allow/block plugins, plugin types, media types, require user interactions. 21:24:13 one thing to controls that's desiared is autoplay. 21:24:26 s/desiared/desired 21:24:52 problem with nested scripts/iframes 21:25:05 very challenging 21:25:22 chris; trying to protect user and advertiser. 21:26:03 as publisher, they're always under attack by nefarious 21:26:12 persons 21:26:30 sean: we're trying to give more control 21:26:44 showing more features 21:27:17 that's our presentation in a nutshell - questions 21:27:34 greg: to what extent does tech rely on extensions addons. 21:28:14 sean: pure HTML, no plugins. one hack. undlying doc is cachable so you don't have a separate request for every piece of content 21:28:35 greg: the original site/webpage right, 21:29:15 sean: Yes. they way we set up the spec, there are rules where you can't embed this in other iframe or host in "evil.com" 21:30:14 chris: google is releasing safeframe in one area end of summer (DFP) 21:30:29 sean: because now you have a clear box, you have more options. 21:30:59 you couldn't do that before. 21:31:05 you have much more control. 21:31:46 chris: thank you for your time. we've talked with philip and others. Trying to find positive things to work on, and bridge the groups. 21:31:59 we should be not doing everything on our own. 21:32:35 we'd like to get your input. 21:32:37 q+ 21:32:43 questions? 21:33:03 lgombos has joined #html-wg 21:33:05 robin: uses cases make sense. most of what you want are extension to sandbox? 21:33:35 sean: sandbox is too course, we need more fine grain. 21:34:17 csp - content security policy 21:34:29 csp is in w3 on rec track 21:35:05 white listing at a feature level might work. 21:35:17 but not at content level 21:36:14 robin: no rule of thumb of where this concept will live, sandbox or csp. 21:36:26 sandbox easier to implement for users. 21:36:31 maybe merge both 21:36:42 you don't need to block on where to solve thse things. 21:37:03 it's not a big deal to move features between the two (csp/sandbox) 21:37:21 at some point we'll figure the best way. 21:37:39 ack adrianba 21:38:23 ade: there definitly needs to be coordination with web app security. the best way to get it goiong is to write a spec 21:38:53 pc: do you guys understand what an extension spec. just need to write it and post it to get discussion on the html-wg 21:39:11 robin: if it needs to move, we can do it later. 21:39:28 pc: the chairs and the team are very willing to work with you. 21:39:43 the web consortium encourages modularity 21:40:03 if it grows, we can give it a bugzilla component. 21:40:30 sean: if you have an origin in a sandbox, how does iframe know it's been sandboxed. 21:40:38 robin: don't believe it does. 21:41:01 ade: expectation is that these things are coordinated. 21:41:45 sean: a simpler case is a service provider spawns an iframe, - I don't know if they coordinate for a sandbox. 21:43:49 chris: you may have read about this recently, its estimated that ad insustry is being defrauded in 1-6 billion dollars. follow the money back to sophisticated crime blocks. 21:44:08 mostly eastern block with engineers that can't get legit work. 21:45:00 told story about callcenter of malicious ad center 21:45:38 bad guys using ads to launder money. biggest thing is using bots. best way to deliver a bot is thorugh ads. 21:45:50 s/thorugh/through 21:46:54 talked about bogus ads 21:47:17 sean: is it possible to know if it's in a browser and not a programmable user agent. 21:47:46 someone loads pages and fake clicks through. 21:48:03 robin: the only way is to put DRM on the browser engines. 21:48:18 Michel: is that a bad thing robin? 21:48:28 s/Michel/Mike/ 21:48:56 robin: the browser needs to be on a secure elementl. 21:49:03 s/elementl/element 21:50:05 sean: there are a lot of good uses for scripting access, but it also is used for bad things. 21:50:15 wwu has joined #html-wg 21:50:20 prak: it's a problem that is getting bigger. 21:50:28 dsinger_ has joined #html-wg 21:50:37 robin: first thing is to ask webapps if it's in their scope. 21:50:46 then I'd go to the websecrity IG, 21:51:02 no promise for solution. 21:51:32 chris: is this a security issue or a fraud issue. usually to do the fraud, there's a securty issue. 21:51:47 s/securty/security 21:52:41 problem is that there's a symbiotic relationships in the industry, there's consequences . 21:52:51 greed rules, companies looking the other way. 21:53:49 sean: loading javascript into webpages can be really evil. but some are making money. 21:54:35 chris: these issues are being discussed at all levels, law inforcement, etc... if there are technical ways to work on this it would be good. 21:55:27 pc: interviews with michael lewis, about trapdoor in trading markets where the margin costs went down. 21:55:58 the fact that the stockmarkets sell their trading stream, they can take advantage. 21:57:21 chris: when we first talked about this, one of the sec firms told us where they follwed money to banks. they're all connected to ad networks 21:57:50 pc: although michael lewis makes money on the book, the iax exchange has passed on 800 tips to the FBI 21:58:02 the general point, the more public it is, the better it could be. 21:59:39 rrsagent,generate minutes 21:59:39 I have made the request to generate http://www.w3.org/2014/04/09-html-wg-minutes.html jaymunro 22:07:15 rubys has joined #html-wg 22:11:31 lgombos has joined #html-wg 22:14:26 rrsagent, generate minutes 22:14:26 I have made the request to generate http://www.w3.org/2014/04/09-html-wg-minutes.html plh 22:17:36 Topici: back to HTML5 features at risk 22:18:22 Topic: back to HTML5 features at risk 22:18:26 scribe: plh 22:18:49 Robin: reportValidaty fails everywhere 22:18:58 ... ok removed 22:19:06 krisk has joined #html-wg 22:19:11 ...