17:02:30 <RRSAgent> RRSAgent has joined #webauthn
17:02:30 <RRSAgent> logging to http://www.w3.org/2016/10/26-webauthn-irc
17:02:35 <wseltzer> trackbot, start teleconf
17:02:37 <trackbot> RRSAgent, make logs public
17:02:37 <Zakim> Zakim has joined #webauthn
17:02:39 <trackbot> Zakim, this will be
17:02:39 <Zakim> I don't understand 'this will be', trackbot
17:02:40 <trackbot> Meeting: Web Authentication Working Group Teleconference
17:02:40 <trackbot> Date: 26 October 2016
17:02:42 <wseltzer> present+ gmandyam
17:02:44 <wseltzer> present+ wseltzer
17:03:01 <wseltzer> present+ nadalin
17:03:17 <wseltzer> regrets+ rbarnes
17:03:50 <vgb> vgb has joined #webauthn
17:03:51 <Robtrace> Robtrace has joined #webauthn
17:04:14 <vgb> present+
17:04:15 <angelo> angelo has joined #webauthn
17:04:39 <wseltzer> present+ apowers
17:05:27 <wseltzer> present+ Robtrace, angelo
17:05:31 <wseltzer> regrets+ jcj_moz
17:05:36 <JeffH> JeffH has joined #webauthn
17:06:11 <wseltzer> present+ JeffH
17:06:59 <wseltzer> zakim, who is here?
17:06:59 <Zakim> Present: gmandyam, wseltzer, nadalin, vgb, apowers, Robtrace, angelo, JeffH
17:07:02 <Zakim> On IRC I see JeffH, angelo, Robtrace, vgb, Zakim, RRSAgent, apowers, gmandyam, hyojin, slightlyoff, mkwst, jcj_moz, rrware, adrianba, ted, sandro, aaronpk, schuki, trackbot,
17:07:02 <Zakim> ... wseltzer
17:07:36 <JeffH> present+ JeffH
17:08:16 <wseltzer> zakim, who's scribing?
17:08:16 <Zakim> I don't understand your question, wseltzer.
17:08:29 <wseltzer> Topic:  Open Pull requests - 229, 235 and 236
17:08:56 <wseltzer> nadalin: is 235 ready?
17:09:01 <wseltzer> JeffH: I think so, needs review
17:09:04 <wseltzer> vgb: looking at it
17:09:11 <wseltzer> https://github.com/w3c/webauthn/pull/235
17:09:18 <wseltzer> JeffH: subtle but important changes
17:09:27 <wseltzer> ... textual diff in PDF in the PR
17:09:40 <wseltzer> -> http://kingsmountain.com/doc/diff/diff-webauthn-index-master-1eebeed-from-index-jeffh-pubkey-94-4b3d958.pdf diff 235
17:10:00 <wseltzer> nadalin: 236
17:10:12 <wseltzer> JeffH: I claim it's ready to go, needs review
17:10:18 <wseltzer> https://github.com/w3c/webauthn/pull/236
17:10:33 <wseltzer> vgb: this one's a lot simpler, looks fine to me and alexei said so too. Just merge?
17:10:38 <wseltzer> JeffH: fine with me
17:11:22 <wseltzer> gmandyam: UAF v 1.0, not DAA extensions?
17:11:31 <wseltzer> JeffH: the references is to 1.0
17:11:37 <wseltzer> ... presumably we'll update in the near future
17:11:46 <wseltzer> gmandyam: the statement is applicable only to 1.0
17:12:04 <wseltzer> JeffH: if we're missing something subtle but important, please submit an issue
17:12:14 <wseltzer> gmandyam: DAA supposed to avoid credentials tied to authenticator models
17:12:32 <wseltzer> JeffH: worth submitting a quick issue so we don't forget to update
17:12:42 <wseltzer> gmandyam: after you merge, I'll submit issue
17:13:15 <wseltzer> JeffH: one more open PR is alexei's
17:13:24 <wseltzer> ... waiting for him to incorporate feedback
17:13:43 <wseltzer> vgb: you and I had some comments, alexei said he'd get to it
17:13:48 <wseltzer> https://github.com/w3c/webauthn/pull/229
17:13:53 <wseltzer> JeffH: we're on the same page
17:14:22 <wseltzer> nadalin: we can't close that one without alexei
17:14:30 <wseltzer> ... we have some open issues remaining
17:15:15 <wseltzer> https://github.com/w3c/webauthn/issues?q=is%3Aopen+is%3Aissue+milestone%3AWD-03
17:15:28 <wseltzer> nadalin: we're down to 9 (on WD-03)
17:15:39 <wseltzer> JeffH: Just added a comment to 123
17:15:52 <wseltzer> ... that will open some additional issues
17:16:00 <wseltzer> ... 94 awaits review of the other PR
17:18:34 <wseltzer> nadalin: we need feedback from Alexei
17:19:14 <wseltzer> JeffH: I can summarize 123
17:19:22 <wseltzer> ... lots of things that need polishing re attestation
17:19:33 <wseltzer> ... need better explanation
17:19:47 <wseltzer> ... Rolf is correct that we're mixing JWA and WebCrypto notation
17:20:02 <wseltzer> ... bytes on the wire
17:20:15 <wseltzer> ... WebCrypto notation is chatty, 7518 is more succinct
17:20:31 <wseltzer> ... currently, we use WebCrypto at makeCredential
17:20:42 <wseltzer> ... attestation specified in terms of JWA
17:20:49 <wseltzer> ... the express the same thing
17:21:34 <wseltzer> ... someone who writes code should make a choice
17:21:58 <wseltzer> ... I'll submit issues on other things needing polishy
17:22:03 <wseltzer> s/polishy/polish/
17:22:13 <wseltzer> vgb: we have work to do, and know what we need to do
17:22:41 <wseltzer> nadalin: I wanted to get WD-03 done before IETF
17:23:49 <wseltzer> Topic: AOB
17:24:19 <wseltzer> gmandyam: why was cose_sign not considered for signature format? that was an intenral question I wanted to answer
17:24:51 <wseltzer> vgb: short answer is, it didn't exist
17:26:03 <wseltzer> ... what would be the benefit of the extra processing?
17:26:44 <wseltzer> [adjourned]
17:27:29 <wseltzer> rrsagent, make logs public
17:27:33 <wseltzer> rrsagent, make minutes
17:27:33 <RRSAgent> I have made the request to generate http://www.w3.org/2016/10/26-webauthn-minutes.html wseltzer
17:27:39 <wseltzer> Chair: Nadalin
17:27:42 <wseltzer> rrsagent, make minutes
17:27:42 <RRSAgent> I have made the request to generate http://www.w3.org/2016/10/26-webauthn-minutes.html wseltzer
19:14:00 <Zakim> Zakim has left #webauthn