16:58:10 <RRSAgent> RRSAgent has joined #webauthn
16:58:10 <RRSAgent> logging to http://www.w3.org/2017/06/07-webauthn-irc
16:58:12 <trackbot> RRSAgent, make logs public
16:58:12 <Zakim> Zakim has joined #webauthn
16:58:14 <trackbot> Zakim, this will be
16:58:14 <Zakim> I don't understand 'this will be', trackbot
16:58:15 <trackbot> Meeting: Web Authentication Working Group Teleconference
16:58:15 <trackbot> Date: 07 June 2017
16:59:51 <Rolf> Rolf has joined #webauthn
17:00:15 <weiler> weiler has changed the topic to: agenda: https://lists.w3.org/Archives/Public/public-webauthn/2017Jun/0067.html
17:00:19 <weiler> agenda: https://lists.w3.org/Archives/Public/public-webauthn/2017Jun/0067.html
17:01:02 <jeffh> jeffh has joined #webauthn
17:01:07 <jeffh> present+ jeffh
17:01:12 <weiler> zakim, who's present?
17:01:14 <selfissued> selfissued has joined #webauthn
17:01:14 <Zakim> I don't understand your question, weiler.
17:01:14 <Rolf> present+
17:01:19 <weiler> zakim, who's on the call?
17:01:19 <Zakim> Present: jeffh, Rolf
17:01:41 <weiler> present+ weiler
17:02:31 <gmandyam> gmandyam has joined #webauthn
17:02:36 <gmandyam> present+ gmandyam
17:02:55 <selfissued> present+
17:03:16 <jyasskin> present+ jyasskin kpaulh balfanz
17:03:32 <kpaulh> kpaulh has joined #webauthn
17:03:37 <kpaulh> +present
17:03:58 <weiler> present+ christiaan, Ketan, jfontana
17:04:04 <weiler> zakim, who's on the call?
17:04:04 <Zakim> Present: jeffh, Rolf, weiler, gmandyam, selfissued, jyasskin, kpaulh, balfanz, present, christiaan, Ketan, jfontana
17:04:23 <weiler> present- present
17:04:25 <weiler> zakim, who's on the call?
17:04:25 <Zakim> Present: jeffh, Rolf, weiler, gmandyam, selfissued, jyasskin, kpaulh, balfanz, christiaan, Ketan, jfontana
17:04:44 <weiler> chair: nadalin
17:06:59 <weiler> scribe: weiler
17:07:08 <wseltzer> present+
17:07:20 <weiler> nadalin: We're meeting at TPAC; plan accordingly.  Day not certain.
17:07:57 <weiler> selfissued: jeffh, please report on what you've been up to.
17:08:10 <Ketan> Ketan has joined #webauthn
17:08:29 <battre> present+
17:08:37 <weiler> jeffh: finished 427 and merged it.
17:08:42 <weiler> jyasskin: fine.
17:09:05 <weiler> jeffh: 427 could still use review.  submitted PR 489.  cleans up many easy issues.
17:09:50 <weiler> nadalin: skip over 375 (editorial).
17:10:31 <angelo> angelo has joined #webauthn
17:11:40 <weiler> ... 379:
17:11:59 <weiler> angelo: I think I've addressed everything.
17:12:19 <weiler> jeffh: this needs some review
17:13:41 <weiler> angelo: @@ is not part of credential mgnt; don't see why this should be added.
17:14:29 <weiler> topic: https://github.com/w3c/webauthn/pull/379
17:14:33 <weiler> "Add isPlatformAuthenticatorReady function to the API surface "
17:15:25 <weiler> angelo: add mike west as a reviewer?
17:15:39 <weiler> jyasskin: would be nice to have example of the use of this func (but I've not read this spec)
17:16:28 <weiler> topic: https://github.com/w3c/webauthn/pull/460
17:16:34 <weiler> Adds requireUserVerification option in AuthenticatorSelectionCriteria
17:16:55 <weiler> @1: no changes not worth discussion today:
17:17:46 <weiler> topic: https://github.com/w3c/webauthn/pull/476
17:18:10 <weiler> rolf: this PR is about adding one option.
17:18:45 <weiler> selfissued: tis this just a boolean or richer?
17:18:54 <weiler> s/tis/is/
17:23:11 <weiler> dirk: sees like a nice-to-have, but since we don't have interop impl. w/o this, let's get a smaller version out the door and save this for future work.
17:23:56 <weiler> nadalin: we're in the process of rewriting the charter and I've been thinking about work for the next version.  this might count.
17:24:04 <weiler> sellfissued et al: concur
17:24:38 <weiler> giri: auth selection criterion?
17:25:38 <weiler> nadalin: suggested to postponed 476.
17:25:41 <weiler> ... now 477
17:25:56 <weiler> topic: https://github.com/w3c/webauthn/pull/477
17:26:43 <weiler> jyasskin: I support dirk's request to postpone, @2
17:27:19 <weiler> nadalin: any objection to postponing 476/477?
17:27:29 <weiler> ... [silence]
17:27:36 <weiler> topic: https://github.com/w3c/webauthn/pull/479
17:28:06 <weiler> rolf: more generic... @3 ... by model identifier.
17:36:32 <weiler> selfissued: ietf has a doc saying that it's useful to say what was used but not to limit what may be used.
17:36:51 <weiler> ... trying to encode knowledge re: what ID provider does in an RP is just asking for breakage.
17:37:16 <weiler> jeffh: mike jones refers to: https://tools.ietf.org/html/draft-ietf-oauth-amr-values
17:38:33 <weiler> ...  some RPs will only support a certain class of authenticators in the forseeable future.
17:39:14 <weiler> ... corporate perspective is tht only certain authenticaotrs will be supported.
17:39:24 <weiler> nadalin: but this can be picked up as reg time
17:39:31 <weiler> jeffh: but there's a UX issue
17:44:19 <weiler> dirk: current dictionary is okay.  propose leaving this as an extension.
17:44:23 <weiler> giri: opposed.
17:45:05 <weiler> dirK; in dict now: is auth built into platform or cross-platform.  2) supports user verification or not
17:45:38 <weiler> s/dirK;/dirk:/
17:46:19 <weiler> jeffh: require resident key and attachment are current ones in the spec.
17:46:40 <weiler> selfissued: alexei's PR for user verification needs to go in, also.
17:47:31 <weiler> jeffh: AAGUID list is optional.  pretty simplistic.  does not cause harm.   aguid is a good hook for us to have.
17:48:04 <weiler> angelo: we should learn more about how it's been used.
17:48:14 <weiler> ... how do you select authenticators based on aaguid?
17:48:42 <weiler> jeffh: not sure how our mobile app does it.
17:51:24 <weiler> christiaan: [describes model of shopping for a laptop and finding that some have an aaguid not on some list...]
17:51:33 <weiler> rrsagent, draft minutes
17:51:33 <RRSAgent> I have made the request to generate http://www.w3.org/2017/06/07-webauthn-minutes.html weiler
17:51:53 <weiler> rrsagent, make logs public
17:53:43 <weiler> angelo: concerned that RPs have to maintain large list of approved authenticators.
17:58:53 <wseltzer> q+
17:59:09 <wseltzer> q-
18:00:53 <weiler> wseltzer: wondering if this is worth a specific write up and Q on the mailing list, to make sure people are focused on the argument around it.  clearly some differences in understanding.
18:03:03 <weiler> nadalin: will anyone step up to write this up?  if not, I'm inclined to leave it for v2?
18:03:14 <weiler> dirk: and as an extension in this version?
18:06:11 <weiler> nadalin: defer this PR; leave text as extension?
18:06:13 <weiler> dirk: support
18:06:33 <weiler> angelo: okay.
18:06:49 <weiler> [giri opposed, but has dropped from call.]
18:07:18 <weiler> rolf: doesn't change my mind, though I can accept that I'm in the minority.
18:07:20 <weiler> jeffh: +1
18:07:26 <weiler> nadalin: put this to list.
18:08:01 <weiler> ... meet again next week
18:08:08 <weiler> rrsagent, draft minutes
18:08:08 <RRSAgent> I have made the request to generate http://www.w3.org/2017/06/07-webauthn-minutes.html weiler
23:27:08 <Zakim> Zakim has left #webauthn