16:59:00 <RRSAgent> RRSAgent has joined #privacy
16:59:00 <RRSAgent> logging to http://www.w3.org/2017/01/19-privacy-irc
16:59:29 <keiji> RRSagent, make minutes
16:59:29 <RRSAgent> I have made the request to generate http://www.w3.org/2017/01/19-privacy-minutes.html keiji
16:59:45 <keiji> RRSAgent, make logs team
17:00:40 <mikeoneill> present+
17:01:02 <keiji> present+
17:01:20 <npdoty> npdoty has joined #privacy
17:01:22 <keiji> Meeting:   Privacy Monthly  January 2017
17:01:30 <barryleiba> present+
17:01:53 <tara> present+
17:02:06 <tara> agenda+ Requests for reviews
17:02:21 <tara> agenda+ I-D Action: draft-ietf-httpbis-client-hints-03.txt
17:02:30 <tara> agenda+ ePrivacy Directive
17:02:38 <tara> agenda+ Privacy questionnaire
17:03:30 <npdoty> (how many pieces of software does WebEx require you to install these days?)
17:03:40 <tara> more than 9000
17:03:59 <barryleiba> Billions and billions.
17:05:11 <tara> Giving a moment for folks to join...
17:06:39 <tara> agenda+ Security IG summary
17:07:26 <christine> agenda item 1: privacy review requests
17:07:26 <tara> Remote Playback API
17:07:39 <tara> http://w3c.github.io/remote-playback/
17:07:49 <christine> until Jan 30 for review
17:07:51 <tara> WebRTC Statistics API
17:07:52 <christine> also for Web RTC
17:07:59 <tara> https://www.w3.org/TR/2016/WD-webrtc-stats-20161214/
17:08:04 <christine> short time frame - looking for comments
17:08:13 <tara> Screen Orientation API
17:08:26 <tara> https://www.w3.org/TR/screen-orientation/
17:08:27 <christine> 3rd request is screen orientation API
17:08:35 <tara> https://www.w3.org/TR/security-privacy-questionnaire/
17:08:42 <tara> https://github.com/w3c/screen-orientation/issues
17:08:46 <christine> they used the draft questionnaire
17:08:51 <tara>  IndexedDB API
17:08:53 <christine> 4th request
17:09:05 <tara> https://www.w3.org/TR/IndexedDB-2/
17:09:07 <keiji> RRSagent, make minutes
17:09:07 <RRSAgent> I have made the request to generate http://www.w3.org/2017/01/19-privacy-minutes.html keiji
17:09:14 <tara> https://github.com/w3c/IndexedDB/issues/
17:09:27 <christine> they were looking for comments, PING did not provide comments in timeframe - Tara asked if comments are still welcome
17:09:38 <christine> Wendy mentioned that there might be some concerns
17:09:47 <christine> deadline for the 3rd request is 12 Feb
17:10:12 <christine> time to make comments
17:10:18 <mikeoneill> +q
17:10:21 <christine> tara asking for volunteers
17:10:36 <tara> ack mike
17:10:51 <weiler> weiler has joined #privacy
17:11:17 <christine> mike looked at indexDB, might say something over the weekend - the basic privacy danger is that the third party could use indexdb to track you - like you can with local storage to re-enliven cookies
17:11:54 <christine> mike: issue of third parties having access to storage in browsers - is the broader issue
17:12:06 <christine> mike: relevant is the ePrivacy directive
17:12:21 <weiler> zakim, who's here/
17:12:22 <weiler> zakim, who's here?
17:12:28 <Zakim> Zakim has joined #privacy
17:12:32 <weiler> present+
17:12:32 <christine> browsers are obliged under the proposal to guard access by third parties of storage within browsers
17:12:53 <christine> mike continued - we should have a general discussion about Web RTC
17:12:58 <christine> local IP address issues
17:13:01 <christine> q+
17:13:31 <tara> Christine - the exposure of local IP address in WebRTC has been an ongoing issue for W3C and IETF specs
17:13:53 <tara> Christine: we're in a better position now; Nick?
17:14:21 <tara> Nick: suggestion was for different modes; default mode would expose only RFC 1918 local IP addr (auto-config, not one hidden behind VPN)
17:15:01 <tara> ack christine
17:15:23 <weiler> present+ keiji, npdoty, christine, barryleiba, mikeoneill, tara
17:15:26 <christine> tara to send a call to list for volunteers for reviews
17:15:29 <weiler> zakim, who's here?
17:15:29 <Zakim> Present: weiler, keiji, npdoty, christine, barryleiba, mikeoneill, tara
17:15:31 <Zakim> On IRC I see weiler, npdoty, RRSAgent, christine, keiji, tara, barryleiba, mikeoneill, yoav, Mek, plinss, schuki, mounir, terri, dveditz, rrware, hadleybeeman, mkwst, lukasz,
17:15:31 <Zakim> ... dustinm, adrianba, jyasskin, wseltzer, trackbot
17:15:53 <christine> agenda item 2:  I-D Action: draft-ietf-httpbis-client-hints-03.txt
17:15:58 <tara> https://datatracker.ietf.org/doc/draft-ietf-httpbis-client-hints/
17:16:08 <tara> https://tools.ietf.org/html/draft-ietf-httpbis-client-hints-03
17:16:49 <christine> for indicating preferences ... discussion around identifiability
17:17:05 <christine> as a result of 'hints'
17:17:05 <npdoty> mikeoneill: I think this might be the right one https://www.ietf.org/id/draft-ietf-rtcweb-ip-handling-03.txt
17:17:33 <mikeoneill> q+
17:17:36 <christine> mark n and nick replied on list
17:17:48 <Marc> Marc has joined #privacy
17:18:04 <christine> mike: did you get a reply to your comment? (asking Nick)
17:18:23 <christine> nick: I think so, he had some questions or request, have some follow-up to do
17:18:44 <npdoty> Mark replied on Christmas day: https://lists.w3.org/Archives/Public/public-privacy/2016OctDec/0065.html
17:19:22 <christine> tara: is anyone here following the work in IETF (from PING)?
17:20:08 <christine> Barry is following HTTP group in general but not everything they are doing, will take a quick look at the doc
17:20:35 <christine> nick: might be useful, it made me wonder what other specs might be doing other things
17:21:18 <tara> ack mike
17:21:18 <christine> barry: we should look at what the group is putting out, will put on my queue - mark is on group and liasion to IETF, so presume he is alert - he sent this one (for example)
17:21:45 <christine> agenda item 3 - ePrivacy directive
17:21:52 <tara> http://www.politico.eu/wp-content/uploads/2016/12/POLITICO-e-privacy-directive-review-draft-december.pdf
17:22:07 <mikeoneill> https://baycloud.com/blog/do-not-track-the-key-to-compliance-with-the-eprivacy-and-general-data-protection-regulations
17:22:10 <christine> q+
17:22:42 <christine> tara: some items more relevant for tracking protection wg, perhaps
17:22:51 <mikeoneill> q+
17:23:24 <npdoty> christine: on my list as well, question: brought up in the Tracking Protection WG, but does anyone know what they plan to do?
17:23:40 <npdoty> mikeoneill: haven't discussed it yet, though it's on the tpwg mailing list
17:23:56 <christine> mike: we need to monitor
17:24:18 <christine> mike: browsers would have a legal obligation to protect personal data of the user
17:24:30 <christine> mike: because they have to ask and register consent
17:24:53 <christine> mike: see what I have written (link above)
17:26:42 <christine> mike: potentially a big legal obligation
17:27:05 <christine> mike: quite important and ties to our work here
17:27:20 <christine> tara: thanks to the link to the analysis
17:27:46 <tara> ack chr
17:27:50 <tara> ach mik
17:28:13 <tara> Privacy questionnaire
17:28:15 <christine> agenda item 4 - privacy questionnaire
17:28:44 <tara> Christine renewing effort in new year to address questionnaire
17:28:54 <tara> Will be done in chunks of work instead of one lot of work
17:29:07 <npdoty> +1, I like the idea of working on particular pieces
17:29:26 <christine> agenda item 5 - summary of security IG call
17:29:59 <christine> tara: fairly short call, core participants
17:30:17 <christine> charter was updated and renewed
17:30:42 <npdoty> https://www.w3.org/2011/07/security-ig-charter.html
17:30:47 <christine> thinking about how to manage the security reviews
17:31:03 <christine> need people with the right amount of expertise and how to do that
17:31:11 <christine> manage workload
17:31:21 <christine> question around the development of the questionnaires
17:31:44 <christine> interested in knowing how PING work on questionnaire proceeds
17:31:48 <christine> update security wiki
17:31:58 <christine> relevant issues in the press, who does reviews, etc
17:32:12 <christine> sam: biggest // is around reviews
17:32:18 <npdoty> q+
17:32:30 <tara> ack mik
17:32:38 <tara> ack np
17:32:52 <christine> nick: curious about the size of the group and the reviews q
17:33:14 <christine> if smaller than this group and both struggling to get reviews, wonder if we should combine?
17:33:16 <christine> q+
17:33:40 <christine> sam: you are on the right track
17:33:48 <christine> should combine where we can
17:34:11 <tara> ack chr
17:34:28 <tara> Christine: we should renew the practice of inviting a rep from the group
17:34:37 <tara> For a robust discussion of issues
17:34:45 <tara> We could also invite the security IG rep at that time
17:34:59 <tara> And then we get one combined discussion
17:35:27 <christine> nick: enough overlap to do collaboration
17:36:27 <christine> tara: heads-up one in the planning
17:36:47 <mikeoneill> q+
17:37:08 <christine> mike: re WebRTC statistics thing, maybe we could meet with Security IG
17:37:10 <weiler> rrsagent, draft minutes
17:37:10 <RRSAgent> I have made the request to generate http://www.w3.org/2017/01/19-privacy-minutes.html weiler
17:37:26 <weiler> zakim, who's here?
17:37:26 <Zakim> Present: weiler, keiji, npdoty, christine, barryleiba, mikeoneill, tara
17:37:28 <Zakim> On IRC I see Marc, Zakim, weiler, npdoty, RRSAgent, christine, keiji, tara, barryleiba, mikeoneill, yoav, Mek, plinss, schuki, mounir, terri, dveditz, rrware, hadleybeeman, mkwst,
17:37:28 <Zakim> ... lukasz, dustinm, adrianba, jyasskin, wseltzer, trackbot
17:37:29 <christine> mike: will look into over the next week or so
17:37:53 <weiler> zakim, who's here?
17:37:53 <Zakim> Present: weiler, keiji, npdoty, christine, barryleiba, mikeoneill, tara
17:37:54 <christine> mike: ask WebRTC people to give a presentation
17:37:55 <Zakim> On IRC I see Marc, Zakim, weiler, npdoty, RRSAgent, christine, keiji, tara, barryleiba, mikeoneill, yoav, Mek, plinss, schuki, mounir, terri, dveditz, rrware, hadleybeeman, mkwst,
17:37:55 <Zakim> ... lukasz, dustinm, adrianba, jyasskin, wseltzer, trackbot
17:37:58 <weiler> rrsagent, draft minutes
17:37:58 <RRSAgent> I have made the request to generate http://www.w3.org/2017/01/19-privacy-minutes.html weiler
17:38:06 <christine> tara: Web payments looking to talk to us in Feb
17:38:21 <christine> tara: choose a time for the next call
17:38:27 <tara> ack m
17:38:33 <keiji> Chair: Tara
17:38:42 <npdoty> 16 February?
17:38:47 <christine> 16 Feb?
17:39:06 <christine> RSA conflict
17:39:49 <christine> 9 Feb?
17:41:17 <christine> tara: propose 16 Feb
17:41:45 <christine> sam: reminder to give early notice to all include web sec
17:41:55 <Marc> Goodbye
17:41:55 <weiler> rrsagent, draft minutes
17:41:55 <RRSAgent> I have made the request to generate http://www.w3.org/2017/01/19-privacy-minutes.html weiler
17:41:58 <barryleiba> barryleiba has left #privacy
17:42:05 <Marc> Marc has left #privacy
17:42:27 <npdoty> weiler, can we make the minutes public?
17:42:40 <keiji> RRSagent, make minutes
17:42:40 <RRSAgent> I have made the request to generate http://www.w3.org/2017/01/19-privacy-minutes.html keiji
17:42:45 <keiji> RRSagent, make public
17:42:46 <RRSAgent> I'm logging. I don't understand 'make public', keiji.  Try /msg RRSAgent help
17:43:01 <keiji> i: RRSagent, make minutes public
17:43:04 <weiler> RRSAgent, make log public
17:45:44 <keiji> keiji has left #privacy
20:00:17 <Zakim> Zakim has left #privacy
20:28:32 <chaals> chaals has joined #privacy
21:35:27 <yoav> yoav has joined #privacy
21:43:21 <chaals> chaals has joined #privacy