W3C

– DRAFT –
Web Authentication WG

28 July 2021

Attendees

Present
agl, akshay, davidturner, davidwaite, elundberg, jfontana, johnbradley, matthewmiller, nadalin, nsteele, raerivera, sbweeden, selfissued, wseltzer
Regrets
-
Chair
Fontana, Nadalin
Scribe
jfontana

Meeting minutes

<wseltzer> https://github.com/w3c/charter-drafts/pulls?q=is%3Apr+is%3Aopen+webauthn

tony: 2 PRs against charter

agl: want to be clear for the charter #367

tony: any objections.... not hearing any, merge it in,

wendy: I can do that.

<wseltzer> tony: any objections to taking charter forward with merged chages

tony: no objections to taking charter forward, once agl changes are made.

wendy: will go to AC for review

tony: nothing from SPWG?

jbradley: they did not mee.
… meet

https://github.com/w3c/webauthn/pull/1655

https://github.com/w3c/webauthn/pull/1655

tony: needs review

https://github.com/w3c/webauthn/pull/1654

elundberg: straight forward change.
… consistency
… changes for relying parties so not much impact

https://github.com/w3c/webauthn/pull/1649

tony: needs a review

https://github.com/w3c/webauthn/pull/1630

nickS: ready to go once it gets checked off. self-issue will approve

https://github.com/w3c/webauthn/pull/1622

elunburg: ongoing.

https://github.com/w3c/webauthn/pull/16521

correction https://github.com/w3c/webauthn/pull/1621

https://github.com/w3c/webauthn/pull/1576

tony: this is jeffH,

https://github.com/w3c/webauthn/pull/1425

tony: nothing new here. placeholder

tony: a few new issues

<selfissued> I approved #1630 in https://github.com/w3c/webauthn/pull/1630#pullrequestreview-717382176

https://github.com/w3c/webauthn/issues/1656

agl: looking for cross origin iFrame
… I will change title to clarify, useful in payments

jbradley: site makes credential for itself
… not the containing page

<selfissued> I approved #1649 at https://github.com/w3c/webauthn/pull/1649#pullrequestreview-717385025

agl: nobody is doing anything to site, it acts on itself

akshay: is there a way browser can look at iFrame properties?

MMiller: https://www.sjoerdlangkemper.nl/2016/07/20/block-iframe-loading/

akshay: i iwll look more at the use case side
… want to see control from RP perspective

https://github.com/w3c/webauthn/issues/1652

tony: looks like we can close

tony: this should be documented in FIDO.

https://github.com/w3c/webauthn/issues/1647

tony: discussed this one.

agl: more of a CTAP issues
… I move this into CTAP and close this one in github

https://github.com/w3c/webauthn/issues/1646

agl: I don't see move to a better replacment.
… not sure what we have, but do we want to change
… as a broad thing, the alternative was unclear

jbradley: how big is this language issue

agl: 23-30 bytes or something

jbradley: we could break authenticators with embedded displays with this.

wency: concern last time was changes made without roundtrip review

agl: we did request a review and pinged the a lot

agl: there is a reply on one issue, but no response yet

nicks: should be have some meeting at TPAC?

tony: could have a joint session

wendy: i can work on that

agl: progress here requires internationalization folks

tony: we will fight them back.
… wnt to resolve this before TPAC
… one other request for people who want to talk to us, Christiaan Brand
… are people OK with this. intersection of webauthn and payments
… OK to give him 30 minutes

tony will invite Christiaan

https://github.com/w3c/webauthn/issues/1645

agl: all of these issues are about language issues

https://github.com/w3c/webauthn/issues/1638

tony: were we going to close this one.

rrsagent: make logs public

rrsagent: draft minutes

Minutes manually created (not a transcript), formatted by scribe.perl version 136 (Thu May 27 13:50:24 2021 UTC).

Diagnostics

No scribenick or scribe found. Guessed: jfontana

Maybe present: elunburg, jbradley, MMiller, nickS, rrsagent, tony, wency, wendy