14:58:31 RRSAgent has joined #wpwg 14:58:31 logging to http://www.w3.org/2017/03/09-wpwg-irc 14:58:33 RRSAgent, make logs public 14:58:33 Zakim has joined #wpwg 14:58:35 Zakim, this will be 14:58:35 I don't understand 'this will be', trackbot 14:58:36 Meeting: Web Payments Working Group Teleconference 14:58:36 Date: 09 March 2017 14:58:43 agenda: https://github.com/w3c/webpayments/wiki/Agenda-20170309 14:58:45 Chair: Nick 14:58:50 Scribe: Ian 14:59:22 pascal_bazin has joined #wpwg 15:01:32 present+ 15:01:43 MattPi has joined #wpwg 15:02:10 present+ 15:02:28 rouslan has joined #wpwg 15:02:31 present+ stan 15:02:31 present+ 15:02:32 Guest91 has joined #wpwg 15:02:41 present+ AdrianHB 15:02:45 MattS has joined #wpwg 15:02:46 present+ 15:02:51 present+ 15:02:52 present+ MattS 15:03:24 zkoch has joined #wpwg 15:03:28 present+ 15:03:52 vkuntz has joined #wpwg 15:03:58 -> https://github.com/w3c/webpayments/wiki/Agenda-20170309 Agenda 15:03:59 present+ 15:04:05 present+ 15:04:10 present+ Christian 15:04:54 topic: 15:04:54 Topic: DST 15:04:58 present+ 15:05:46 Next week's call one hour earlier for EU's 15:06:25 topic: Payment Request API 15:07:05 (On filtering) 15:07:40 vkuntz has joined #wpwg 15:07:43 AdrianHB: Other than "where the data is specified" we want to understand whether it's possible to have filters that are not a predefined set of enums. 15:07:48 present+ 15:07:57 ...can the ecosystem start to use a filter, or are browsers required to roll out filters as they emerge? 15:08:03 ...that has impact on the card network list 15:08:08 q+ 15:08:25 present+ manash 15:08:44 ian: have had a few conversations on this 15:09:11 ... want to discuss the filtering in general and the networks list seperately 15:09:37 ... there is some value to the list beyond a hard coded list of filters 15:10:05 ... we want to allow apps to express capabilities and for browsers to consider these 15:10:30 molly has joined #wpwg 15:10:42 ... part 1: providing capabilities from the payment app is being handled by the TF 15:11:01 O.O 15:11:19 ... part 2: proposal is a generic string based filtering that browsers apply to the filters and capapbilities 15:11:49 ... in conversation with zkoch he has said he believes the number of methods that will use filtering to be small 15:12:14 ... also Google will have work to do to implement any W3C defined methods so adding filters will be part of that 15:12:40 ... so it occurred to me that this may be an implementation detail 15:12:56 https://w3c.github.io/browser-payment-api/#show-method 15:13:00 For each paymentMethod in request.[[serializedMethodData]]: 15:13:14 ... this means that browsers should indicate if they support filters 15:13:19 "Consult the appropriate payment apps to see if they support any of the payment method identifiers given by the first element of the paymentMethod tuple, passing along the data string given by the second element of the tuple in order to help them determine their support. " 15:13:28 ... [reads from PR spec] 15:13:57 ... I believe this to be overly constraining. It should just say that filtering happens here. 15:14:08 ... AdrianHB suggested we should just make a decision 15:14:19 +1 to describing filtering in PR API. 15:14:41 ... Concrete proposal is that we change PR spec to say "filters are taken into account" 15:15:00 ... This leaves browsers to decide how they interpret "taken into account" 15:15:04 q+ 15:15:09 ack ian 15:15:17 ack adm 15:15:19 ack ada 15:15:36 adamR: Is the implication that we won't have a description anywhere of a reusable algorithm 15:15:44 ian: yes 15:16:31 ... we don't know yet how the apps will specify their capabilities. We could put guidance in the guidelines document. 15:16:34 q+ 15:16:52 IJ: Implication is no reusable string matching 15:17:12 AdamR: concern that for infrequently released browsers, this will put a damper on payment method deployment 15:17:33 q+ 15:17:39 (IJ notes that we can add "suggested payment method filter syntax" to => https://w3c.github.io/webpayments/proposals/method-practice/) 15:17:59 adamR: I understand we don't yet have filter use cases for custom payment methods, but I think that's short-sited. 15:18:04 ..I expect they will arise in the future. 15:18:24 ..cutting off at this time, especially something that is extremely likely to work, is short-sited 15:18:24 +1 15:18:30 ack ad 15:18:32 ack AdrianHb 15:18:40 chair: AdrianHB 15:18:46 regrets+ NickTR 15:19:05 adrianHB: I want to add to AdamR's comment. We are effectively saying that we don't expect this aspect of the API to be interoperable 15:19:33 q? 15:19:33 ..the only way I see this panning out if we say "browser implement this however they like"...then other browsers will need to implement generic string matching otherwise they will no longer interoperate 15:19:37 ack zkoch 15:20:28 zkoch: A few comments. The first thing is that we discussed this yesterday among the PR API editors/implementers. There was unanimity that given where we are (nearing CR) and with small number of use cases, it was not priority to implement generic filter matching today 15:20:38 ...that did not mean "never" it just meant "not yet" 15:20:49 ...this is one of a number of issues that we feel are not for V1 15:21:00 q+ 15:21:02 ..we have 2 implementations in the wild, and the priority is interop between them. 15:21:13 ...we can add this in the future. 15:21:41 ...just because Chrome is making a choice to implement W3C spec short strings a particular way, does not imply everyone has to do so 15:22:04 ...note also that an alternative to an abstract payment method spec is N payment method specs 15:22:09 ...also, I don't see an interop risk here. 15:22:33 ...suppose firefox implements something generic...that's not an interop problem; we will match on what we identify and effectively drop what we don't recognize 15:22:35 q? 15:22:37 ack ad 15:22:47 Manash has joined #wpwg 15:22:53 adamR: I want to agree with the third point...I don't see the interop issue (agree with Zach) 15:23:23 q+ to ask to clarify the browser will behave if it encounters filters it doesn't understand 15:23:24 ..but I have concerns with the first point that we should go based on what is currently implemented 15:24:17 ian: my attempt to address was to write this in the payment apps spec. The re-usable matching algo was then a bonus 15:24:22 q? 15:24:32 q? 15:24:34 ack AdrianHB 15:24:34 AdrianHB, you wanted to ask to clarify the browser will behave if it encounters filters it doesn't understand 15:24:36 ack me 15:25:15 AdrianHB: Zach can you clarify the last point you made about dropping filters...Suppose I introduce a payment method spec and want to filter based on system (e.g., values are bitcoin, ether, dashcoin) 15:25:29 ....proprietary method, so I use payment method manifest....what would Chrome do? 15:25:58 [Payment method identifier is a URL] 15:26:17 zkoch: At the current time we would not do any filtering. If it's a URL, we just pass over the entire blob; no filtering 15:26:45 ...I would say, don't make a generic one...make a specific one per system 15:27:01 ... I don't see evidence of the real world use cases 15:27:02 q+ 15:27:56 ack me 15:28:11 IJ: I agree that if we bring an abstraction spec forward, we should be able to provide evidence that there is a common set of data fields 15:28:32 +1 to AdrianHB’s point 15:28:44 AdrianHB: I think the ability to filter or not is a material difference between w3c and non-w3c payment method specs 15:29:09 ian: there are other differences 15:29:29 ... we support features in the manifest for example 15:29:39 q+ 15:29:41 q+ 15:29:45 ack MattPi 15:30:39 mattPi: To be quite frank, we are still indeterminate on the payment app spec. That spec is crisper than it has been, so we are absolutely looking at it and working with our partners 15:30:45 ...we are 100% committed to payment request API 15:31:14 ...our release cycle is such that we want to minimize change to the PR API spec 15:31:32 ...+1 to zkoch's comment that we are not seeing a big demand at this time...we might see the demand grow once PR API takes off 15:31:40 q+ 15:32:10 ack MattS 15:32:27 MattS: Would Ian's proposal mean that payment apps cannot do filtering? 15:33:03 ian: the goal is an optimal user experience. Only apps that are most likely to work appear in the list 15:33:15 ... so some filtering is required before the list is show 15:34:17 matts: I had thought we still had canMakePayments() in the app 15:34:38 ian: no this is a replacement because of issues with making canMakePayment() work 15:35:17 ... keen to hear your opinion on this matts 15:36:30 MattS: Regarding zkoch's point - SEPA needs a country filter...even though it's a specific payment method. 15:36:34 ...you don't want one URL per country 15:36:44 http://w3c.github.io/webpayments-methods-credit-transfer-direct-debit/ 15:36:45 q? 15:36:48 ack me 15:37:00 q+ 15:37:14 q+ 15:37:16 adrianHB: Let's try to document the argument and take to the FTF meeting 15:37:23 zakim, close the queue 15:37:23 ok, Ian, the speaker queue is closed 15:37:49 adamR: Ian said something a few moments ago that works relatively well - having a specific step in PR API that says "this is where filters and capabilities are matched" 15:37:57 ...and make clear that this is an extension point 15:38:05 ...and we can talk about it at the payment app spec 15:38:22 .....I think that's a reasonable compromise 15:38:29 (Ian is hearing +1 to Ian's notino) 15:38:35 MattS: Yes, seems like a reasonable compromise 15:38:42 def: notino (a tiny notion) 15:39:37 [RRSAgent can't find "def" on the attendees list] 15:39:46 sgtm, +1 15:39:51 IJ: I'd be happy to work with Zkoch on a proposal 15:40:12 AdrianHB: So the proposal is to clarify in PR API where payment app capabilities are evaluated 15:40:31 ...I am hearing AdamR say that let's call it an extension point 15:40:38 q? 15:40:41 ack adam 15:40:42 ack Matt 15:40:51 Thanks, AdrianHB — that’s a very precise summary. 15:41:12 ACTION: Ian to work with zkoch on a change to PR API to ensure payment app capabilities taken into account and details will be handled outside the spec 15:41:13 'Ian' is an ambiguous username. Please try a different identifier, such as family name or username (e.g., IFSF-EFT-WG-Lead, ijacobs, ijmad). 15:41:30 topic: 15:41:40 Topic: Addition of "cb" to list of approved networks 15:42:17 https://www.w3.org/Payments/card-network-ids 15:42:32 Proposed: 15:42:32 We adopt a procedure for validating requests to be added to the list (cf proposal to add cb). Validation will consist of avoiding duplication. 15:42:32 We update the explanation in the network id list to make clear that approval does not imply interoperable implementation in browsers. 15:42:33 We add a statement that merchants may use Payment Request API for a card network that is not yet in the list; the list is only used for further filtering. 15:43:28 q+ 15:43:33 zakim, open the queue 15:43:33 ok, Ian, the speaker queue is open 15:43:36 q+ 15:43:38 ian: Nick raised concerns about anti-competitive issues if there are limits to joining 15:43:47 ... (missed 2nd point) 15:44:12 betehess has joined #wpwg 15:44:30 "cb" means "carte bancaire" 15:45:00 ... one way to mitigate the concern is that this doesn't prevent cards from unlisted networks being used it just gives some UI optimization 15:45:11 "carte bleue" is a brand for specific bank 15:45:44 MattS: It was my expectation that supported network list could be short strings or URLs...has this been debated? 15:45:57 ..the problem with this list is that it was put therefore for bootstrapping purposes 15:46:20 ..it seems to me that implementing your own supported network string would be same issue 15:47:07 ian: At least Google have said they won't implement matching based on arbitrary strings so a distributed filtering system is not feasible 15:47:11 IJ: My understanding is that at least google will only implement known strings, so no need for distributed naming. 15:47:50 q? 15:47:52 zkoch: That's correct, but I had not thought about network values being URLs...we had assumed that the list of card networks would be finite 15:47:55 ack mat 15:47:56 ack MattS 15:48:21 MattS: There is a similar list to this list...effectively the list of EMV card providers 15:48:26 ...it's 100s and 100s long 15:48:44 ..there are some issues with that list (e.g., duplication) 15:48:57 ....same company appears multiple times 15:49:02 ..but it shows me that the list is not small 15:49:11 It would be useful to see and/or review that list :) 15:49:14 If possible 15:49:43 ian: short string vs URL is immaterial if the issue is security 15:50:39 IJ: Zach could you look into that? 15:50:53 ...could help us avoid registry...but we hear that there are string issues...would URLs be any better? 15:51:11 AdrianHB: I suggest we shelve this until we address filter issue 15:51:27 Registered Provider Identifier list https://eftlab.co.uk/index.php/site-map/knowledge-base/212-emv-rid 15:51:38 PROPOSED: Update network identifier list per IJ's proposal in the agenda (modulo editorial changes) 15:52:06 +1 15:52:12 +1 15:52:25 ACTION: Ian to update the network identifier policy and add CB 15:52:25 'Ian' is an ambiguous username. Please try a different identifier, such as family name or username (e.g., IFSF-EFT-WG-Lead, ijacobs, ijmad). 15:52:31 RESOLVED: To adopt network id policy change and cb 15:52:47 AdrianHB: It's worth noting that there was not resounding consensus there. 15:54:06 q+ 15:54:23 MattS: I am concerned about this list growing in size 15:54:34 AdrianHB: I think many of us share this concern 15:54:47 ...but I propose we put this aside until we do the filtering issue 15:55:22 topic: Payment app demos 15:55:34 q+ 15:55:40 q- 15:55:42 AdrianHB: This is just a request to know which browser implementations we could use to do payment app demos; please share on the list 15:55:46 Topic: Testing 15:56:26 Stan: I sent an email last week at the end of the call with state of testing 15:56:34 Note that at first glance at this list, most of these are not CC networks @matts 15:56:54 https://github.com/stan-stripe/js-payment-request 15:57:08 https://github.com/w3c/web-platform-tests/pull/4768 15:57:27 http://i.imgur.com/OeSdfxS.png 15:57:33 stan: What's promising can be seen in that image 15:57:51 ...I think we have a framework to test constructor and show() implementation 15:57:52 cool! 15:58:02 ...how much do we want to test? 15:58:19 ...during the test task force call we talked about creating a mock payment method service through the w3c testing framework 15:58:27 ..I'm not sure how much we will test payment request v payment apps 15:58:35 q+ 15:58:35 ...that's my ask for the group - how far do we want to go? 15:58:37 ack adr 15:58:51 Chrome has a desktop version in development behind a flag. We can see how it performs :) 15:58:57 \o/ 15:59:11 Edge also has an implementation on Insider Preview builds 15:59:18 AdrianHB: I know there are sandboxes and simulators...can we try hooking one of those up as a payment method mock? 15:59:23 Stan: I am open to anything.... 15:59:54 ..nice thing about a mock payment method is you can call show() and drive the behavior of the implementation 15:59:58 ...test error handling, etc. 16:00:05 ...it has proven pretty useful 16:00:19 q+ 16:00:22 AdrianHB: Any thoughts on making this easier? 16:00:38 rouslan: we have a desktop implementation behind a flag; not quite functional yet 16:00:51 ..but as soon as it more or less works we'll let you know and you can start to test 16:01:13 https://github.com/w3c/payment-request-info/wiki/ImplementationStatus 16:01:22 chrome://flags/#enable-experimental-web-platform-features and chrome://flags/#web-payments 16:01:29 Download chrome dev, though 16:01:30 Or canary 16:01:36 ack 16:01:38 q? 16:01:40 ack rous 16:03:11 IJ: What do we need to know at the FTF meeting as far as test suites (for the "getting to CR" discussion) 16:03:19 Topic: next meeting 16:03:32 - 16 march call (time zone change!) 16:03:36 - 23-24 March FTF meeting 16:04:12 IJ: We are at capacity for the FTF meeting 16:04:17 RRSAgent, make minutes 16:04:17 I have made the request to generate http://www.w3.org/2017/03/09-wpwg-minutes.html Ian 16:04:21 I suspect there will be mutliation 16:04:22 RRSAgent, set logs public 16:04:25 and literal cutting off at knees 16:04:33 we have a payment app effigy 16:04:37 for that purpose 16:04:49 good, seems safer 16:04:52 see ya 16:05:12 MattPi has left #wpwg 16:05:45 RRSAgent, make minutes 16:05:45 I have made the request to generate http://www.w3.org/2017/03/09-wpwg-minutes.html Ian 16:05:48 RRSAgent, set logs public 16:07:17 Guest91 has joined #wpwg 16:08:44 cweiss has joined #wpwg 16:26:01 Guest91 has joined #wpwg 16:36:34 Guest91 has joined #wpwg 17:20:35 Guest91 has joined #wpwg 17:44:41 Guest91 has joined #wpwg 18:02:44 Zakim has left #wpwg 18:06:02 betehess has joined #wpwg 19:54:17 cweiss has joined #wpwg 19:57:14 betehess has joined #wpwg 19:59:27 Guest91 has joined #wpwg 20:01:51 cweiss has joined #wpwg 21:51:04 cweiss has joined #wpwg 22:32:17 Guest91 has joined #wpwg