16:17:55 <RRSAgent> RRSAgent has joined #dnt
16:17:55 <RRSAgent> logging to http://www.w3.org/2017/08/28-dnt-irc
16:17:57 <trackbot> RRSAgent, make logs world
16:18:00 <trackbot> Meeting: Tracking Protection Working Group Teleconference
16:18:00 <trackbot> Date: 28 August 2017
16:18:08 <Bert> Chair: schunter
16:18:13 <Bert> Scribe: Bert
16:18:22 <Bert> present+ Bert, Alan, Aleecia, Brendan, Matthias, Dave, Jason, Mike, Roy, Shane
16:19:15 <dsinger> (It used to be that you could confirm that the exact Store you did, or a subset thereof, still exists.)
16:19:31 <Bert> fielding: The confirm API that was there was confirming that a specific list of site-specific list was stored. I chnaged it to ask if one exist for one specific.
16:20:03 <Bert> moneill2: You removed site, didn't you? So can't check sub-domain. cookie-sub-domain.
16:20:26 <Bert> fielding: Different thing. Dave talked about checking a different set than was prev. stored.
16:20:46 <Bert> ... motiviationwas to make it easier for scripts.
16:21:09 <Bert> ... Can request for one site instead of another site.
16:21:23 <Bert> ... But I wasn't there when the original was designed.
16:21:43 <Bert> ... OK to chnage back. Excpet I want to keep the new, nicer names.
16:21:56 <Bert> schunter: The names are mot important to anybody, I think.
16:22:18 <dsinger> I do care about security/privacy/fingerprinting/cross-origin etc.
16:22:25 <Bert> schunter: So what is the current consensus, roy?
16:22:25 <dsinger> no
16:22:27 <dsinger> not yet
16:22:34 <Bert> fielding: Do we have consensus on the e-mail?
16:22:41 <Bert> schunter: That was my understanding.
16:22:51 <schunter> - Subresources can ask for web-wide and site-specific
16:22:59 <schunter> - Only for their script origin
16:23:09 <schunter> - Confirm can confirm exactly what has been stored
16:23:23 <Bert> ... [see ^^]
16:24:33 <Bert> moneill2: And the thing that Dave asked about?
16:24:58 <Bert> ... If tyou set site-specific without targets, that is the same as web-wide.
16:25:39 <Bert> ... So if a facebook.com iframe makes an consent, that would only apply when you actually visit facebook.com
16:26:08 <dsinger> right, it’s all about duplets of the top-level browsing context, and the target [top-level, target].  what is stored, and what is matched?
16:26:16 <Bert> fielding: I changed the parameter names, to distinguish site and web wide.
16:27:21 <Bert> ... The site you are one determines the site in the tuple.
16:27:46 <dsinger> right, facebook got a site-specific [facebook, *].  now you’re on another site, say IBM, so we’re seeing if [IBM, facebook] matches, and it does not
16:27:47 <Bert> ... If you look at the API to see what tuple is stored.
16:29:01 <Bert> dsinger: If FB stores a site-spec exception: (FB,*). And IBM asks if there is a (IBM,FB) it receives none.
16:29:23 <fielding> BTW, the Xbox web browser sets DNT:1 by default
16:29:55 <Bert> moneill2: Some of the "site domain" in the spec should be "script origin" I think.
16:30:09 <Bert> schunter: I'd like to have that final text by Wed.
16:30:29 <dsinger> I am still analyzing
16:30:29 <Bert> ... Then decide on Monday and send it off.
16:30:34 <dsinger> q?
16:30:43 <Bert> schunter: Any other comments or feedback?
16:31:02 <Bert> ack dsinger
16:31:02 <Zakim> dsinger, you wanted to ask about web-wide
16:31:03 <schunter> ACK DS
16:31:19 <dsinger> as I understand it, we used to be able to store [*, top-level] for web-wide, now we can store [*, target] for all targets in the array, as long as they are same-origin related to the calling top-level, right?
16:31:24 <Bert> dsinger: [Sound dropped]
16:31:39 <Bert> ... [See ^^]
16:32:16 <Bert> fielding: yes, that is the current text.
16:32:27 <dsinger> thx, roughly right
16:32:30 <Bert> ... But it has to be a target that the 3effective script origin can set a cookie on.
16:33:09 <Bert> dsinger: Trying to think of a problem, but can't think of any at the mment. Making sure I udnerstood...
16:33:47 <Bert> schunter: So schedule is new text by Wed and send off on Mon., unless new problems.
16:34:00 <Bert> fielding: Monday is big holiday in US.
16:34:03 <wileys> Agreed - no call next week please
16:34:28 <Bert> dsinger: Should do a formal call. Don't take silence as consent.
16:34:29 <aleecia> I’m not sure I’m consenting so much as giving up :-)
16:34:51 <dsinger> I think you should do a formal Call for Consensus, and ask for people to reply
16:34:57 <Bert> dsinger: Can do by e-mail, doesn't need a telcon.
16:35:42 <Bert> shane: Set a defined period, but still allow people to not respond.
16:36:00 <Bert> dsinger: But I want a reasonable number of people to say yes.
16:36:12 <aleecia> It’s more that whatever I say gets ignored so why bother. This is not lack of caring. It’s lack of expecting anything I say matters.
16:36:17 <Bert> shane: But cannot let some people to hold the WG hostage.
16:36:44 <wileys> Aleecia - I don’t ignore you.  :-)
16:36:50 <aleecia> heh!
16:36:57 <Bert> schunter: Two, three people should agree, at least.
16:37:55 <wileys> wileys has left #dnt
16:38:02 <Bert> schunter: I'll check when we need the next telcon.
16:38:17 <Bert> dsinger: When will we have the text?
16:38:21 <Bert> fielding: Tomorrow night.
16:38:34 <Bert> schunter: No call next week.
16:39:12 <aleecia> toodles
17:16:24 <at_> at_ has joined #dnt
17:49:48 <dsinger> dsinger has joined #dnt
17:53:48 <fielding> zakim, list attendees
17:53:48 <Zakim> As of this point the attendees have been dsinger, fielding, Bert, Alan, Aleecia, Brendan, Matthias, Dave, Jason, Mike, Roy, Shane, wileys
17:54:07 <fielding> trackbot, end meeting
17:54:07 <trackbot> Zakim, list attendees
17:54:07 <Zakim> As of this point the attendees have been dsinger, fielding, Bert, Alan, Aleecia, Brendan, Matthias, Dave, Jason, Mike, Roy, Shane, wileys
17:54:15 <trackbot> RRSAgent, please draft minutes
17:54:15 <RRSAgent> I have made the request to generate http://www.w3.org/2017/08/28-dnt-minutes.html trackbot
17:54:16 <trackbot> RRSAgent, bye
17:54:16 <RRSAgent> I see no action items